Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2019-9513
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T21:54:44.842Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "VU#605641", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "url": "https://kb.cert.org/vuls/id/605641/" }, { "name": "USN-4099-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/4099-1/" }, { "name": "FEDORA-2019-befd924cfe", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/" }, { "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "name": "FEDORA-2019-81985a8858", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/" }, { "name": "DSA-4505", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2019/dsa-4505" }, { "name": "FEDORA-2019-5a6a7bc12c", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/" }, { "name": "FEDORA-2019-6a2980de56", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/" }, { "name": "FEDORA-2019-8a437d5c2f", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/" }, { "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "name": "DSA-4511", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2019/dsa-4511" }, { "name": "FEDORA-2019-7a0b45fdc4", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/" }, { "name": "RHSA-2019:2692", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "name": "openSUSE-SU-2019:2120", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "name": "openSUSE-SU-2019:2114", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "name": "openSUSE-SU-2019:2115", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "name": "RHSA-2019:2745", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "name": "RHSA-2019:2746", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "name": "RHSA-2019:2775", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "name": "RHSA-2019:2799", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "name": "RHSA-2019:2925", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "name": "RHSA-2019:2939", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "name": "RHSA-2019:2949", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "name": "openSUSE-SU-2019:2232", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "name": "openSUSE-SU-2019:2234", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "name": "RHSA-2019:2955", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "name": "RHSA-2019:2966", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "name": "openSUSE-SU-2019:2264", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "name": "RHSA-2019:3041", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "name": "RHSA-2019:3933", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "name": "RHSA-2019:3935", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "name": "RHSA-2019:3932", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "name": "DSA-4669", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2020/dsa-4669" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.f5.com/csp/article/K02591030" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp%3Butm_medium=RSS" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "credits": [ { "lang": "en", "value": "Thanks to Jonathan Looney of Netflix for reporting this vulnerability." } ], "descriptions": [ { "lang": "en", "value": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-01-20T14:42:02", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc" }, "references": [ { "name": "VU#605641", "tags": [ "third-party-advisory", "x_refsource_CERT-VN" ], "url": "https://kb.cert.org/vuls/id/605641/" }, { "name": "USN-4099-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/4099-1/" }, { "name": "FEDORA-2019-befd924cfe", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/" }, { "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "name": "FEDORA-2019-81985a8858", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/" }, { "name": "DSA-4505", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2019/dsa-4505" }, { "name": "FEDORA-2019-5a6a7bc12c", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/" }, { "name": "FEDORA-2019-6a2980de56", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/" }, { "name": "FEDORA-2019-8a437d5c2f", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/" }, { "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "name": "DSA-4511", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2019/dsa-4511" }, { "name": "FEDORA-2019-7a0b45fdc4", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/" }, { "name": "RHSA-2019:2692", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "name": "openSUSE-SU-2019:2120", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "name": "openSUSE-SU-2019:2114", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "name": "openSUSE-SU-2019:2115", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "name": "RHSA-2019:2745", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "name": "RHSA-2019:2746", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "name": "RHSA-2019:2775", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "name": "RHSA-2019:2799", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "name": "RHSA-2019:2925", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "name": "RHSA-2019:2939", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "name": "RHSA-2019:2949", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "name": "openSUSE-SU-2019:2232", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "name": "openSUSE-SU-2019:2234", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "name": "RHSA-2019:2955", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "name": "RHSA-2019:2966", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "name": "openSUSE-SU-2019:2264", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "name": "RHSA-2019:3041", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "name": "RHSA-2019:3933", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "name": "RHSA-2019:3935", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "name": "RHSA-2019:3932", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "name": "DSA-4669", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2020/dsa-4669" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.f5.com/csp/article/K02591030" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp%3Butm_medium=RSS" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" } ], "source": { "discovery": "UNKNOWN" }, "title": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service", "x_generator": { "engine": "Vulnogram 0.0.7" }, "x_legacyV4Record": { "CVE_data_meta": { "AKA": "HTTP/2 Resource Loop", "ASSIGNER": "cert@cert.org", "ID": "CVE-2019-9513", "STATE": "PUBLIC", "TITLE": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "credit": [ { "lang": "eng", "value": "Thanks to Jonathan Looney of Netflix for reporting this vulnerability." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU." } ] }, "generator": { "engine": "Vulnogram 0.0.7" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-400 Uncontrolled Resource Consumption" } ] } ] }, "references": { "reference_data": [ { "name": "VU#605641", "refsource": "CERT-VN", "url": "https://kb.cert.org/vuls/id/605641/" }, { "name": "USN-4099-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4099-1/" }, { "name": "FEDORA-2019-befd924cfe", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/" }, { "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "name": "FEDORA-2019-81985a8858", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/" }, { "name": "DSA-4505", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4505" }, { "name": "FEDORA-2019-5a6a7bc12c", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/" }, { "name": "FEDORA-2019-6a2980de56", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/" }, { "name": "FEDORA-2019-8a437d5c2f", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/" }, { "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "name": "DSA-4511", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4511" }, { "name": "FEDORA-2019-7a0b45fdc4", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/" }, { "name": "RHSA-2019:2692", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "name": "openSUSE-SU-2019:2120", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "name": "openSUSE-SU-2019:2114", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "name": "openSUSE-SU-2019:2115", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "name": "RHSA-2019:2745", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "name": "RHSA-2019:2746", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "name": "RHSA-2019:2775", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "name": "RHSA-2019:2799", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "name": "RHSA-2019:2925", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "name": "RHSA-2019:2939", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "name": "RHSA-2019:2949", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "name": "openSUSE-SU-2019:2232", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "name": "openSUSE-SU-2019:2234", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "name": "RHSA-2019:2955", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "name": "RHSA-2019:2966", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "name": "openSUSE-SU-2019:2264", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "name": "RHSA-2019:3041", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "name": "RHSA-2019:3933", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "name": "RHSA-2019:3935", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "name": "RHSA-2019:3932", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "name": "DSA-4669", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2020/dsa-4669" }, { "name": "https://www.oracle.com/security-alerts/cpuoct2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "refsource": "MISC", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "name": "https://www.synology.com/security/advisory/Synology_SA_19_33", "refsource": "CONFIRM", "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "name": "https://support.f5.com/csp/article/K02591030", "refsource": "CONFIRM", "url": "https://support.f5.com/csp/article/K02591030" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0002/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0005/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS", "refsource": "CONFIRM", "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS" }, { "name": "https://www.oracle.com/security-alerts/cpujan2021.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujan2021.html" } ] }, "source": { "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2019-9513", "datePublished": "2019-08-13T20:50:59", "dateReserved": "2019-03-01T00:00:00", "dateUpdated": "2024-08-04T21:54:44.842Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2019-9513\",\"sourceIdentifier\":\"cret@cert.org\",\"published\":\"2019-08-13T21:15:12.380\",\"lastModified\":\"2024-11-21T04:51:46.440\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.\"},{\"lang\":\"es\",\"value\":\"Algunas implementaciones de HTTP / 2 son vulnerables a los bucles de recursos, lo que puede conducir a una denegaci\u00f3n de servicio. El atacante crea m\u00faltiples flujos de solicitud y baraja continuamente la prioridad de los flujos de una manera que provoca un cambio considerable en el \u00e1rbol de prioridad. Esto puede consumir un exceso de CPU.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV30\":[{\"source\":\"cret@cert.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"cret@cert.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.0\",\"versionEndIncluding\":\"1.4.0\",\"matchCriteriaId\":\"93988E60-006B-434D-AB16-1FA1D2FEBC2A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.12\",\"matchCriteriaId\":\"1D294D56-E784-4DA8-9C2C-BC5A05C92C0C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.04\",\"matchCriteriaId\":\"65B1D2F6-BC1F-47AF-B4E6-4B50986AC622\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndIncluding\":\"6.2.3\",\"matchCriteriaId\":\"603BF43B-FC99-4039-A3C0-467F015A32FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndIncluding\":\"7.1.6\",\"matchCriteriaId\":\"07BB02CE-D4F2-459C-B0C6-FF78BF7996AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.0.3\",\"matchCriteriaId\":\"D875E0D8-D109-4F7F-A4C4-9EDD66CEE74E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"022A0BC6-2C70-406D-8D60-EC6F9F6A90CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C997777-BE79-4F77-90D7-E1A71D474D88\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D0C5120-B961-440F-B454-584BC54B549C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CCBDFF9-AF42-4681-879B-CF789EBAD130\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D100F7CE-FC64-4CC6-852A-6136D72DA419\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2466282-51AB-478D-9FF4-FA524265ED2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0952BA1A-5DF9-400F-B01F-C3A398A8A2D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B157A2D-3422-4224-82D9-15AB3B989075\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"732F14CE-7994-4DD2-A28B-AE9E79826C01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1987BDA-0113-4603-B9BE-76647EB043F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D7EE4B6-A6EC-4B9B-91DF-79615796673F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"C120C2F1-D50D-49CC-8E96-207ACCA49674\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.7.2.0\",\"versionEndExcluding\":\"7.7.2.24\",\"matchCriteriaId\":\"765E9856-2748-4A8B-91F5-A4DB3C8C547A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.8.2.0\",\"versionEndExcluding\":\"7.8.2.13\",\"matchCriteriaId\":\"EE6E66B1-3291-4E8E-93D6-30E9FDCF983E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.1.0\",\"versionEndExcluding\":\"8.2.0\",\"matchCriteriaId\":\"227104AD-396D-4ADD-87C7-C4CD5583DA04\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.9.5\",\"versionEndExcluding\":\"1.16.1\",\"matchCriteriaId\":\"68DD813A-1BC4-45FB-A3C4-E1BCE5F82EC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.17.0\",\"versionEndIncluding\":\"1.17.2\",\"matchCriteriaId\":\"DF1705D3-ABAB-477E-9572-7D4DBAB4E38B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E11C65C3-1B17-4362-A99C-59583081A24D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"348EEE70-E114-4720-AAAF-E77DE5C9A2D1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.8.1\",\"matchCriteriaId\":\"74FB695D-2C76-47AB-988E-5629D2E695E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"8.9.0\",\"versionEndExcluding\":\"8.16.1\",\"matchCriteriaId\":\"CFC0252A-DF1D-4CF4-B450-27267227B599\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndIncluding\":\"10.12.0\",\"matchCriteriaId\":\"25A3180B-21AF-4010-9DAB-41ADFD2D8031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"10.13.0\",\"versionEndExcluding\":\"10.16.3\",\"matchCriteriaId\":\"2EC65858-FF7B-4171-82EA-80942D426F40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndExcluding\":\"12.8.1\",\"matchCriteriaId\":\"F522C500-AA33-4029-865F-F27FB00A354E\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2692\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2745\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2746\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2775\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2799\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2925\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2939\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2949\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2955\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2966\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3041\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3932\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3933\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3935\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kb.cert.org/vuls/id/605641/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/\",\"source\":\"cret@cert.org\"},{\"url\":\"https://seclists.org/bugtraq/2019/Aug/40\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Sep/1\",\"source\":\"cret@cert.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190823-0002/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190823-0005/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K02591030\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"cret@cert.org\"},{\"url\":\"https://usn.ubuntu.com/4099-1/\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4505\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4511\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4669\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2020.html\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.synology.com/security/advisory/Synology_SA_19_33\",\"source\":\"cret@cert.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2692\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2745\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2746\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2775\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2799\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2925\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2939\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2949\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2955\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2966\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3041\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3932\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3933\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:3935\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kb.cert.org/vuls/id/605641/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://seclists.org/bugtraq/2019/Aug/40\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://seclists.org/bugtraq/2019/Sep/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190823-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190823-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K02591030\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp%3Butm_medium=RSS\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/4099-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4505\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2019/dsa-4511\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4669\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.synology.com/security/advisory/Synology_SA_19_33\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
WID-SEC-W-2024-1050
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "nginx ist eine modular aufgebaute Webserver-Software, welche durch verschiedene Module Funktionalit\u00e4ten wie Reverse- oder Email-Proxy unterst\u00fctzt. Nginx wird unter der BSD-Lizenz vertrieben.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- UNIX", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1050 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-1050.json" }, { "category": "self", "summary": "WID-SEC-2024-1050 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1050" }, { "category": "external", "summary": "NGINX Security Advisory vom 2019-08-14", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" }, { "category": "external", "summary": "Ubuntu Security Notice USN-4099-1 vom 2019-08-16", "url": "https://usn.ubuntu.com/4099-1/" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-12 vom 2019-08-17", "url": "https://security.archlinux.org/ASA-201908-12" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-13 vom 2019-08-17", "url": "https://security.archlinux.org/ASA-201908-13" }, { "category": "external", "summary": "Debian Security Advisory DSA-4505 vom 2019-08-23", "url": "http://www.debian.org/security/2019/dsa-4505" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-17 vom 2019-08-27", "url": "https://security.archlinux.org/ASA-201908-17" }, { "category": "external", "summary": "Debian Security Advisory DSA-4511 vom 2019-09-02", "url": "https://www.debian.org/security/2019/dsa-4511" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2309-1 vom 2019-09-06", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192309-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2692 vom 2019-09-10", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2019-2692 vom 2019-09-11", "url": "http://linux.oracle.com/errata/ELSA-2019-2692.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2746 vom 2019-09-12", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2745 vom 2019-09-12", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2775 vom 2019-09-17", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2799-01 vom 2019-09-17", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "external", "summary": "Oracle Linux Errata ELSA-2019-2799 vom 2019-09-19", "url": "https://linux.oracle.com/errata/ELSA-2019-2799.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2473-1 vom 2019-09-26", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2925 vom 2019-09-30", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2939 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2946 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2950 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2950" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2949 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2966 vom 2019-10-03", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2955 vom 2019-10-02", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2559-1 vom 2019-10-04", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192559-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3041 vom 2019-10-14", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3933 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3935 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3932 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4018 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4018" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4019 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4019" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4021 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4021" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4020 vom 2019-11-28", "url": "https://access.redhat.com/errata/RHSA-2019:4020" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:0922 vom 2020-03-23", "url": "https://access.redhat.com/errata/RHSA-2020:0922" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:0983 vom 2020-03-26", "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:1445 vom 2020-04-14", "url": "https://access.redhat.com/errata/RHSA-2020:1445" }, { "category": "external", "summary": "Debian Security Advisory DSA-4669 vom 2020-04-30", "url": "https://www.debian.org/security/2020/dsa-4669" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:2067 vom 2020-05-18", "url": "https://access.redhat.com/errata/RHSA-2020:2067" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2021:0932-1 vom 2021-03-24", "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:3192 vom 2020-07-28", "url": "https://access.redhat.com/errata/RHSA-2020:3192" }, { "category": "external", "summary": "Juniper Security Advisory JSA11167 vom 2021-04-16", "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11167" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2020-5495 vom 2020-12-18", "url": "https://linux.oracle.com/errata/ELSA-2020-5495.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6754-2 vom 2024-05-07", "url": "https://ubuntu.com/security/notices/USN-6754-2" } ], "source_lang": "en-US", "title": "nginx: Mehrere Schwachstellen erm\u00f6glichen Denial of Service", "tracking": { "current_release_date": "2024-05-07T22:00:00.000+00:00", "generator": { "date": "2024-05-08T08:11:09.301+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-1050", "initial_release_date": "2019-08-14T22:00:00.000+00:00", "revision_history": [ { "date": "2019-08-14T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2019-08-15T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2019-08-18T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Arch Linux und Fedora aufgenommen" }, { "date": "2019-08-19T22:00:00.000+00:00", "number": "4", "summary": "Referenz(en) aufgenommen: FEDORA-2019-63BA15CC83, FEDORA-2019-8A437D5C2F, FEDORA-2019-4427FD65BE" }, { "date": "2019-08-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2019-08-27T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Arch Linux und Fedora aufgenommen" }, { "date": "2019-09-02T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2019-09-05T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-09-09T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-10T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2019-09-12T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-17T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-18T22:00:00.000+00:00", "number": "13", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-19T22:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2019-09-26T22:00:00.000+00:00", "number": "15", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-09-29T22:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-30T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-30T22:00:00.000+00:00", "number": "18", "summary": "Version nicht vorhanden" }, { "date": "2019-10-01T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-10-03T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-10-06T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-10-14T22:00:00.000+00:00", "number": "22", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-20T23:00:00.000+00:00", "number": "23", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-26T23:00:00.000+00:00", "number": "24", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-27T23:00:00.000+00:00", "number": "25", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-03-22T23:00:00.000+00:00", "number": "26", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-03-26T23:00:00.000+00:00", "number": "27", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-04-14T22:00:00.000+00:00", "number": "28", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-04-29T22:00:00.000+00:00", "number": "29", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2020-05-17T22:00:00.000+00:00", "number": "30", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-07-28T22:00:00.000+00:00", "number": "31", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-12-17T23:00:00.000+00:00", "number": "32", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2021-03-24T23:00:00.000+00:00", "number": "33", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2021-04-15T22:00:00.000+00:00", "number": "34", "summary": "Neue Updates von Juniper aufgenommen" }, { "date": "2024-05-07T22:00:00.000+00:00", "number": "35", "summary": "Neue Updates von Ubuntu aufgenommen" } ], "status": "final", "version": "35" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Juniper JUNOS", "product": { "name": "Juniper JUNOS", "product_id": "5930", "product_identification_helper": { "cpe": "cpe:/o:juniper:junos:-" } } } ], "category": "vendor", "name": "Juniper" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c1.16.1", "product": { "name": "Open Source nginx \u003c1.16.1", "product_id": "T014853", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:1.16.1" } } }, { "category": "product_version_range", "name": "\u003c1.17.3", "product": { "name": "Open Source nginx \u003c1.17.3", "product_id": "T014854", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:1.17.3" } } }, { "category": "product_version_range", "name": "\u003cPlus R18 P1", "product": { "name": "Open Source nginx \u003cPlus R18 P1", "product_id": "T014855", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:plus_r18_p1" } } } ], "category": "product_name", "name": "NGINX" } ], "category": "vendor", "name": "NGINX" }, { "branches": [ { "category": "product_name", "name": "Open Source Arch Linux", "product": { "name": "Open Source Arch Linux", "product_id": "T013312", "product_identification_helper": { "cpe": "cpe:/o:archlinux:archlinux:-" } } } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9511" }, { "cve": "CVE-2019-9513", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9513" }, { "cve": "CVE-2019-9516", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9516" } ] }
wid-sec-w-2024-1050
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "nginx ist eine modular aufgebaute Webserver-Software, welche durch verschiedene Module Funktionalit\u00e4ten wie Reverse- oder Email-Proxy unterst\u00fctzt. Nginx wird unter der BSD-Lizenz vertrieben.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- UNIX", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1050 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-1050.json" }, { "category": "self", "summary": "WID-SEC-2024-1050 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1050" }, { "category": "external", "summary": "NGINX Security Advisory vom 2019-08-14", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" }, { "category": "external", "summary": "Ubuntu Security Notice USN-4099-1 vom 2019-08-16", "url": "https://usn.ubuntu.com/4099-1/" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-12 vom 2019-08-17", "url": "https://security.archlinux.org/ASA-201908-12" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-13 vom 2019-08-17", "url": "https://security.archlinux.org/ASA-201908-13" }, { "category": "external", "summary": "Debian Security Advisory DSA-4505 vom 2019-08-23", "url": "http://www.debian.org/security/2019/dsa-4505" }, { "category": "external", "summary": "Arch Linux Security Advisory ASA-201908-17 vom 2019-08-27", "url": "https://security.archlinux.org/ASA-201908-17" }, { "category": "external", "summary": "Debian Security Advisory DSA-4511 vom 2019-09-02", "url": "https://www.debian.org/security/2019/dsa-4511" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2309-1 vom 2019-09-06", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192309-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2692 vom 2019-09-10", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2019-2692 vom 2019-09-11", "url": "http://linux.oracle.com/errata/ELSA-2019-2692.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2746 vom 2019-09-12", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2745 vom 2019-09-12", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2775 vom 2019-09-17", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2799-01 vom 2019-09-17", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "external", "summary": "Oracle Linux Errata ELSA-2019-2799 vom 2019-09-19", "url": "https://linux.oracle.com/errata/ELSA-2019-2799.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2473-1 vom 2019-09-26", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2925 vom 2019-09-30", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2939 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2946 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2950 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2950" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2949 vom 2019-10-01", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2966 vom 2019-10-03", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:2955 vom 2019-10-02", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2019:2559-1 vom 2019-10-04", "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192559-1.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3041 vom 2019-10-14", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3933 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3935 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:3932 vom 2019-11-20", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4018 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4018" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4019 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4019" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4021 vom 2019-11-26", "url": "https://access.redhat.com/errata/RHSA-2019:4021" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2019:4020 vom 2019-11-28", "url": "https://access.redhat.com/errata/RHSA-2019:4020" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:0922 vom 2020-03-23", "url": "https://access.redhat.com/errata/RHSA-2020:0922" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:0983 vom 2020-03-26", "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:1445 vom 2020-04-14", "url": "https://access.redhat.com/errata/RHSA-2020:1445" }, { "category": "external", "summary": "Debian Security Advisory DSA-4669 vom 2020-04-30", "url": "https://www.debian.org/security/2020/dsa-4669" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:2067 vom 2020-05-18", "url": "https://access.redhat.com/errata/RHSA-2020:2067" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2021:0932-1 vom 2021-03-24", "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2020:3192 vom 2020-07-28", "url": "https://access.redhat.com/errata/RHSA-2020:3192" }, { "category": "external", "summary": "Juniper Security Advisory JSA11167 vom 2021-04-16", "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11167" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2020-5495 vom 2020-12-18", "url": "https://linux.oracle.com/errata/ELSA-2020-5495.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6754-2 vom 2024-05-07", "url": "https://ubuntu.com/security/notices/USN-6754-2" } ], "source_lang": "en-US", "title": "nginx: Mehrere Schwachstellen erm\u00f6glichen Denial of Service", "tracking": { "current_release_date": "2024-05-07T22:00:00.000+00:00", "generator": { "date": "2024-05-08T08:11:09.301+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-1050", "initial_release_date": "2019-08-14T22:00:00.000+00:00", "revision_history": [ { "date": "2019-08-14T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2019-08-15T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2019-08-18T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Arch Linux und Fedora aufgenommen" }, { "date": "2019-08-19T22:00:00.000+00:00", "number": "4", "summary": "Referenz(en) aufgenommen: FEDORA-2019-63BA15CC83, FEDORA-2019-8A437D5C2F, FEDORA-2019-4427FD65BE" }, { "date": "2019-08-22T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2019-08-27T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Arch Linux und Fedora aufgenommen" }, { "date": "2019-09-02T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2019-09-05T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-09-09T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-10T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2019-09-12T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-17T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-18T22:00:00.000+00:00", "number": "13", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-19T22:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2019-09-26T22:00:00.000+00:00", "number": "15", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-09-29T22:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-30T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-09-30T22:00:00.000+00:00", "number": "18", "summary": "Version nicht vorhanden" }, { "date": "2019-10-01T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-10-03T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-10-06T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2019-10-14T22:00:00.000+00:00", "number": "22", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-20T23:00:00.000+00:00", "number": "23", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-26T23:00:00.000+00:00", "number": "24", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2019-11-27T23:00:00.000+00:00", "number": "25", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-03-22T23:00:00.000+00:00", "number": "26", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-03-26T23:00:00.000+00:00", "number": "27", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-04-14T22:00:00.000+00:00", "number": "28", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-04-29T22:00:00.000+00:00", "number": "29", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2020-05-17T22:00:00.000+00:00", "number": "30", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-07-28T22:00:00.000+00:00", "number": "31", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2020-12-17T23:00:00.000+00:00", "number": "32", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2021-03-24T23:00:00.000+00:00", "number": "33", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2021-04-15T22:00:00.000+00:00", "number": "34", "summary": "Neue Updates von Juniper aufgenommen" }, { "date": "2024-05-07T22:00:00.000+00:00", "number": "35", "summary": "Neue Updates von Ubuntu aufgenommen" } ], "status": "final", "version": "35" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Juniper JUNOS", "product": { "name": "Juniper JUNOS", "product_id": "5930", "product_identification_helper": { "cpe": "cpe:/o:juniper:junos:-" } } } ], "category": "vendor", "name": "Juniper" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c1.16.1", "product": { "name": "Open Source nginx \u003c1.16.1", "product_id": "T014853", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:1.16.1" } } }, { "category": "product_version_range", "name": "\u003c1.17.3", "product": { "name": "Open Source nginx \u003c1.17.3", "product_id": "T014854", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:1.17.3" } } }, { "category": "product_version_range", "name": "\u003cPlus R18 P1", "product": { "name": "Open Source nginx \u003cPlus R18 P1", "product_id": "T014855", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:plus_r18_p1" } } } ], "category": "product_name", "name": "NGINX" } ], "category": "vendor", "name": "NGINX" }, { "branches": [ { "category": "product_name", "name": "Open Source Arch Linux", "product": { "name": "Open Source Arch Linux", "product_id": "T013312", "product_identification_helper": { "cpe": "cpe:/o:archlinux:archlinux:-" } } } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9511" }, { "cve": "CVE-2019-9513", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9513" }, { "cve": "CVE-2019-9516", "notes": [ { "category": "description", "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen." } ], "product_status": { "known_affected": [ "2951", "T002207", "67646", "T000126", "T013312", "5930", "T004914" ] }, "release_date": "2019-08-14T22:00:00Z", "title": "CVE-2019-9516" } ] }
var-201908-0263
Vulnerability from variot
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU. Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS) attacks. HTTP/2 is the second version of the hypertext transfer protocol, which is mainly used to ensure the communication between the client and the server. A resource management error vulnerability exists in HTTP/2. A vulnerability in the HTTP/2 implementation of Nginx could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on a targeted system. The vulnerability is due to improper priority changes in the affected software that could lead to excessive CPU usage. An attacker could exploit this vulnerability by sending a request that submits malicious input to an affected system. A successful exploit could result in a DoS condition on the targeted system. nginx.org has confirmed the vulnerability and released software updates. Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Solution:
Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.
Installation instructions are available from the Fuse 7.6.0 product documentation page: https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/
- Bugs fixed (https://bugzilla.redhat.com/):
1399546 - CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests 1432858 - CVE-2017-5929 logback: Serialization vulnerability in SocketServer and ServerSocketReceiver 1591854 - CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests 1618573 - CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip 1643043 - CVE-2018-15756 springframework: DoS Attack via Range Requests 1693777 - CVE-2019-3888 undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed 1703469 - CVE-2019-10174 infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods 1709860 - CVE-2019-5427 c3p0: loading XML configuration leads to denial of service 1713068 - CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes 1725795 - CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. Description:
This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release. After installing the updated packages, the httpd daemon will be restarted automatically. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: rh-nginx112-nginx security update Advisory ID: RHSA-2019:2746-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2019:2746 Issue date: 2019-09-12 CVE Names: CVE-2019-9511 CVE-2019-9513 CVE-2019-9516 ==================================================================== 1. Summary:
An update for rh-nginx112-nginx is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64
- Description:
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
Security Fix(es):
-
HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)
-
HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)
-
HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The rh-nginx112-nginx service must be restarted for this update to take effect.
- Package List:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
aarch64: rh-nginx112-nginx-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.aarch64.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
aarch64: rh-nginx112-nginx-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.aarch64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.aarch64.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
ppc64le: rh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm
s390x: rh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):
Source: rh-nginx112-nginx-1.12.1-3.el7.1.src.rpm
x86_64: rh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm rh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2019-9511 https://access.redhat.com/security/cve/CVE-2019-9513 https://access.redhat.com/security/cve/CVE-2019-9516 https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBXXo0dNzjgjWX9erEAQhefQ//dizpNyk55ohd3bzckhrY1IwL4dPGUqa9 PPhd+kqZlhQYr8VqABpda7hXEg65TUrrz8eM8BESmoNc/4vdUjzbO0KI5ByM2zgS ieDmP/4dcZtKlYH6TmSaRMZ5+D1jdgcoP6nkwuC/4a+b0HyB+9P6z/Prn94RLM5d kbhKEU1nLqNW7KjxSYtHU8Nc0n34WeXKiNaLHviV7dFbC0Pxhlt0W/2CpNDsgvco rGHbK6pWsajWGdYZ78zSrnmAIGn6R84LEK8kRcCzzm0c7ehewC4vkSghdCqfqLC2 PO2koEfNNYRPSA8WgEZYBjVAIkGJz7mhDBN99kOQjf3VDpgPmOa+NJ0pDel6F7Nv oEx8ruGYQzLt0z2aCaY7lavHJ4isCJOHE7hvyqgumDmpkC14bxNrhjy+65o6fQVS 7RrzBtPtRTR2UAH0NhkKTXDjVS7NK+OIEcb1mj19DUvMUXDHLaZfYos0erqqf9j/ issNZShxG2rbCBlDZRC875AAeby/0k0ETYg8VeqazhtSaNF2wx0ZnanoOQ+skFaO 7QmNe8O4vrk5A0yFhSjVrYNj2A51XplqXdrdmaN6FEKGm0WEd3BkLEX352bo5NHt fXpdT29tQwd5IHBsx5Ti3ik2lzxIRzRChed8Hnu4xHs/j++rJMNkQ39ku8kmqXVL pTuQ2UprbLU=PAtT -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 7) - noarch, x86_64
- Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: rh-nodejs10-nodejs (10.16.3). 8) - aarch64, noarch, ppc64le, s390x, x86_64
- ========================================================================== Ubuntu Security Notice USN-6754-2 May 07, 2024
nghttp2 vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
Summary:
Several security issues were fixed in nghttp2.
Software Description: - nghttp2: HTTP/2 C Library and tools
Details:
USN-6754-1 fixed vulnerabilities in nghttp2. This update provides the corresponding update for Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9511, CVE-2019-9513)
It was discovered that nghttp2 incorrectly handled request cancellation. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-44487)
It was discovered that nghttp2 could be made to process an unlimited number of HTTP/2 CONTINUATION frames. (CVE-2024-28182)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 24.04 LTS libnghttp2-14 1.59.0-1ubuntu0.1 nghttp2 1.59.0-1ubuntu0.1 nghttp2-client 1.59.0-1ubuntu0.1 nghttp2-proxy 1.59.0-1ubuntu0.1 nghttp2-server 1.59.0-1ubuntu0.1
In general, a standard system update will make all the necessary changes
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201908-0263", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "leap", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "15.1" }, { "model": "enterprise communications broker", "scope": "eq", "trust": 1.0, "vendor": "oracle", "version": "3.1.0" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "10.0" }, { "model": "web gateway", "scope": "gte", "trust": 1.0, "vendor": "mcafee", "version": "7.7.2.0" }, { "model": "web gateway", "scope": "lt", "trust": 1.0, "vendor": "mcafee", "version": "7.7.2.24" }, { "model": "vs960hd", "scope": "eq", "trust": 1.0, "vendor": "synology", "version": null }, { "model": "node.js", "scope": "lt", "trust": 1.0, "vendor": "nodejs", "version": "8.16.1" }, { "model": "node.js", "scope": "lte", "trust": 1.0, "vendor": "nodejs", "version": "10.12.0" }, { "model": "openshift service mesh", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "1.0" }, { "model": "software collections", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "1.0" }, { "model": "node.js", "scope": "gte", "trust": 1.0, "vendor": "nodejs", "version": "8.9.0" }, { "model": "fedora", "scope": "eq", "trust": 1.0, "vendor": "fedoraproject", "version": "29" }, { "model": "graalvm", "scope": "eq", "trust": 1.0, "vendor": "oracle", "version": "19.2.0" }, { "model": "node.js", "scope": "gte", "trust": 1.0, "vendor": "nodejs", "version": "10.0.0" }, { "model": "jboss enterprise application platform", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.2.0" }, { "model": "web gateway", "scope": "lt", "trust": 1.0, "vendor": "mcafee", "version": "8.2.0" }, { "model": "nginx", "scope": "gte", "trust": 1.0, "vendor": "f5", "version": "1.17.0" }, { "model": "jboss enterprise application platform", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3.0" }, { "model": "node.js", "scope": "gte", "trust": 1.0, "vendor": "nodejs", "version": "12.0.0" }, { "model": "node.js", "scope": "gte", "trust": 1.0, "vendor": "nodejs", "version": "10.13.0" }, { "model": "nginx", "scope": "lte", "trust": 1.0, "vendor": "f5", "version": "1.17.2" }, { "model": "traffic server", "scope": "gte", "trust": 1.0, "vendor": "apache", "version": "8.0.0" }, { "model": "node.js", "scope": "gte", "trust": 1.0, "vendor": "nodejs", "version": "8.0.0" }, { "model": "enterprise communications broker", "scope": "eq", "trust": 1.0, "vendor": "oracle", "version": "3.2.0" }, { "model": "diskstation manager", "scope": "eq", "trust": 1.0, "vendor": "synology", "version": "6.2" }, { "model": "node.js", "scope": "lt", "trust": 1.0, "vendor": "nodejs", "version": "12.8.1" }, { "model": "swiftnio", "scope": "lte", "trust": 1.0, "vendor": "apple", "version": "1.4.0" }, { "model": "traffic server", "scope": "gte", "trust": 1.0, "vendor": "apache", "version": "7.0.0" }, { "model": "quay", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "3.0.0" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "9.0" }, { "model": "jboss core services", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "1.0" }, { "model": "traffic server", "scope": "lte", "trust": 1.0, "vendor": "apache", "version": "7.1.6" }, { "model": "enterprise linux", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "8.0" }, { "model": "web gateway", "scope": "gte", "trust": 1.0, "vendor": "mcafee", "version": "8.1.0" }, { "model": "node.js", "scope": "lt", "trust": 1.0, "vendor": "nodejs", "version": "10.16.3" }, { "model": "nginx", "scope": "gte", "trust": 1.0, "vendor": "f5", "version": "1.9.5" }, { "model": "leap", "scope": "eq", "trust": 1.0, "vendor": "opensuse", "version": "15.0" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "16.04" }, { "model": "traffic server", "scope": "lte", "trust": 1.0, "vendor": "apache", "version": "8.0.3" }, { "model": "fedora", "scope": "eq", "trust": 1.0, "vendor": "fedoraproject", "version": "30" }, { "model": "web gateway", "scope": "lt", "trust": 1.0, "vendor": "mcafee", "version": "7.8.2.13" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "18.04" }, { "model": "skynas", "scope": "eq", "trust": 1.0, "vendor": "synology", "version": null }, { "model": "nginx", "scope": "lt", "trust": 1.0, "vendor": "f5", "version": "1.16.1" }, { "model": "swiftnio", "scope": "gte", "trust": 1.0, "vendor": "apple", "version": "1.0.0" }, { "model": "web gateway", "scope": "gte", "trust": 1.0, "vendor": "mcafee", "version": "7.8.2.0" }, { "model": "node.js", "scope": "lte", "trust": 1.0, "vendor": "nodejs", "version": "8.8.1" }, { "model": "ubuntu linux", "scope": "eq", "trust": 1.0, "vendor": "canonical", "version": "19.04" }, { "model": "traffic server", "scope": "gte", "trust": 1.0, "vendor": "apache", "version": "6.0.0" }, { "model": "traffic server", "scope": "lte", "trust": 1.0, "vendor": "apache", "version": "6.2.3" }, { "model": null, "scope": null, "trust": 0.8, "vendor": "akamai", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "amazon", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "apache traffic server", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "apple", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "cloudflare", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "envoy", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "facebook", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "go programming language", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "litespeed", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "microsoft", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "netty", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "node js", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "synology", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "twisted", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "ubuntu", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "grpc", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "nghttp2", "version": null }, { "model": null, "scope": null, "trust": 0.8, "vendor": "nginx", "version": null } ], "sources": [ { "db": "CERT/CC", "id": "VU#605641" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.4.0", "versionStartIncluding": "1.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "versionStartIncluding": "10.12", "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*", "cpe_name": [], "versionStartIncluding": "14.04", "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "8.0.3", "versionStartIncluding": "8.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "7.1.6", "versionStartIncluding": "7.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "6.2.3", "versionStartIncluding": "6.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "7.7.2.24", "versionStartIncluding": "7.7.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "7.8.2.13", "versionStartIncluding": "7.8.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "8.2.0", "versionStartIncluding": "8.1.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.16.1", "versionStartIncluding": "1.9.5", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.17.2", "versionStartIncluding": "1.17.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "8.8.1", "versionStartIncluding": "8.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "10.12.0", "versionStartIncluding": "10.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndExcluding": "12.8.1", "versionStartIncluding": "12.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "10.16.3", "versionStartIncluding": "10.13.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "8.16.1", "versionStartIncluding": "8.9.0", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2019-9513" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Red Hat", "sources": [ { "db": "PACKETSTORM", "id": "155414" }, { "db": "PACKETSTORM", "id": "155417" }, { "db": "PACKETSTORM", "id": "156941" }, { "db": "PACKETSTORM", "id": "155416" }, { "db": "PACKETSTORM", "id": "154471" }, { "db": "PACKETSTORM", "id": "154693" }, { "db": "PACKETSTORM", "id": "154663" }, { "db": "CNNVD", "id": "CNNVD-201908-935" } ], "trust": 1.3 }, "cve": "CVE-2019-9513", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "VHN-160948", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULMON", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CVE-2019-9513", "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "HIGH", "trust": 0.1, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "cret@cert.org", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2019-9513", "trust": 1.0, "value": "HIGH" }, { "author": "cret@cert.org", "id": "CVE-2019-9513", "trust": 1.0, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201908-935", "trust": 0.6, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-160948", "trust": 0.1, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2019-9513", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-160948" }, { "db": "VULMON", "id": "CVE-2019-9513" }, { "db": "CNNVD", "id": "CNNVD-201908-935" }, { "db": "NVD", "id": "CVE-2019-9513" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU. Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS) attacks. HTTP/2 is the second version of the hypertext transfer protocol, which is mainly used to ensure the communication between the client and the server. A resource management error vulnerability exists in HTTP/2. A vulnerability in the HTTP/2 implementation of Nginx could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on a targeted system. \nThe vulnerability is due to improper priority changes in the affected software that could lead to excessive CPU usage. An attacker could exploit this vulnerability by sending a request that submits malicious input to an affected system. A successful exploit could result in a DoS condition on the targeted system. \nnginx.org has confirmed the vulnerability and released software updates. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \nThe purpose of this text-only errata is to inform you about the security\nissues fixed in this release. Solution:\n\nBefore applying the update, back up your existing installation, including\nall applications, configuration files, databases and database settings, and\nso on. \n\nInstallation instructions are available from the Fuse 7.6.0 product\ndocumentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/\n\n4. Bugs fixed (https://bugzilla.redhat.com/):\n\n1399546 - CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests\n1432858 - CVE-2017-5929 logback: Serialization vulnerability in SocketServer and ServerSocketReceiver\n1591854 - CVE-2017-16012 js-jquery: XSS in responses from cross-origin ajax requests\n1618573 - CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip\n1643043 - CVE-2018-15756 springframework: DoS Attack via Range Requests\n1693777 - CVE-2019-3888 undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed\n1703469 - CVE-2019-10174 infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods\n1709860 - CVE-2019-5427 c3p0: loading XML configuration leads to denial of service\n1713068 - CVE-2019-10184 undertow: Information leak in requests for directories without trailing slashes\n1725795 - CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. Description:\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part\nof the JBoss Core Services offering. \n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack\nApache Server 2.4.29 and includes bug fixes and enhancements. Refer to the\nRelease Notes for information on the most significant bug fixes and\nenhancements included in this release. After installing the updated\npackages, the httpd daemon will be restarted automatically. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n==================================================================== \nRed Hat Security Advisory\n\nSynopsis: Important: rh-nginx112-nginx security update\nAdvisory ID: RHSA-2019:2746-01\nProduct: Red Hat Software Collections\nAdvisory URL: https://access.redhat.com/errata/RHSA-2019:2746\nIssue date: 2019-09-12\nCVE Names: CVE-2019-9511 CVE-2019-9513 CVE-2019-9516\n====================================================================\n1. Summary:\n\nAn update for rh-nginx112-nginx is now available for Red Hat Software\nCollections. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\nnginx is a web and proxy server supporting HTTP and other protocols, with a\nfocus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service\n(CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource\nconsumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take\neffect. \n\n5. Package List:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\naarch64:\nrh-nginx112-nginx-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.aarch64.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\naarch64:\nrh-nginx112-nginx-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.aarch64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.aarch64.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\nppc64le:\nrh-nginx112-nginx-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.ppc64le.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.ppc64le.rpm\n\ns390x:\nrh-nginx112-nginx-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.s390x.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.s390x.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-nginx112-nginx-1.12.1-3.el7.1.src.rpm\n\nx86_64:\nrh-nginx112-nginx-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-debuginfo-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-image-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-perl-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-http-xslt-filter-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-mail-1.12.1-3.el7.1.x86_64.rpm\nrh-nginx112-nginx-mod-stream-1.12.1-3.el7.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2019-9511\nhttps://access.redhat.com/security/cve/CVE-2019-9513\nhttps://access.redhat.com/security/cve/CVE-2019-9516\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\npTuQ2UprbLU=PAtT\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. 7) - noarch, x86_64\n\n3. Description:\n\nNode.js is a software development platform for building fast and scalable\nnetwork applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version:\nrh-nodejs10-nodejs (10.16.3). 8) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. ==========================================================================\nUbuntu Security Notice USN-6754-2\nMay 07, 2024\n\nnghttp2 vulnerability\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 24.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in nghttp2. \n\nSoftware Description:\n- nghttp2: HTTP/2 C Library and tools\n\nDetails:\n\nUSN-6754-1 fixed vulnerabilities in nghttp2. This update provides the\ncorresponding update for Ubuntu 24.04 LTS. \n\nOriginal advisory details:\n\n It was discovered that nghttp2 incorrectly handled the HTTP/2\n implementation. This issue\n only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9511,\n CVE-2019-9513)\n\n It was discovered that nghttp2 incorrectly handled request cancellation. This issue only affected Ubuntu\n 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-44487)\n\n It was discovered that nghttp2 could be made to process an unlimited \nnumber\n of HTTP/2 CONTINUATION frames. (CVE-2024-28182)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 24.04 LTS\n libnghttp2-14 1.59.0-1ubuntu0.1\n nghttp2 1.59.0-1ubuntu0.1\n nghttp2-client 1.59.0-1ubuntu0.1\n nghttp2-proxy 1.59.0-1ubuntu0.1\n nghttp2-server 1.59.0-1ubuntu0.1\n\nIn general, a standard system update will make all the necessary changes", "sources": [ { "db": "NVD", "id": "CVE-2019-9513" }, { "db": "CERT/CC", "id": "VU#605641" }, { "db": "VULHUB", "id": "VHN-160948" }, { "db": "VULMON", "id": "CVE-2019-9513" }, { "db": "PACKETSTORM", "id": "155414" }, { "db": "PACKETSTORM", "id": "155417" }, { "db": "PACKETSTORM", "id": "156941" }, { "db": "PACKETSTORM", "id": "155416" }, { "db": "PACKETSTORM", "id": "154471" }, { "db": "PACKETSTORM", "id": "154693" }, { "db": "PACKETSTORM", "id": "154663" }, { "db": "PACKETSTORM", "id": "178500" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2019-9513", "trust": 2.6 }, { "db": "CERT/CC", "id": "VU#605641", "trust": 2.5 }, { "db": "MCAFEE", "id": "SB10296", "trust": 1.7 }, { "db": "CNNVD", "id": "CNNVD-201908-935", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "155414", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "156941", "trust": 0.7 }, { "db": "AUSCERT", "id": "ESB-2019.3306", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.3116", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4788", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2020.1544", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.3129", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2020.1076", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4343", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.3597.3", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4645", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4665", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2020.0007", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4403", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4238", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.4596", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.3597.2", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2020.0643", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2019.3299", "trust": 0.6 }, { "db": "AUSCERT", "id": "ESB-2020.0100", "trust": 0.6 }, { "db": "NSFOCUS", "id": "43920", "trust": 0.6 }, { "db": "ICS CERT", "id": "ICSA-19-346-01", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-160948", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2019-9513", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "155417", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "155416", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "154471", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "154693", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "154663", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "178500", "trust": 0.1 } ], "sources": [ { "db": "CERT/CC", "id": "VU#605641" }, { "db": "VULHUB", "id": "VHN-160948" }, { "db": "VULMON", "id": "CVE-2019-9513" }, { "db": "PACKETSTORM", "id": "155414" }, { "db": "PACKETSTORM", "id": "155417" }, { "db": "PACKETSTORM", "id": "156941" }, { "db": "PACKETSTORM", "id": "155416" }, { "db": "PACKETSTORM", "id": "154471" }, { "db": "PACKETSTORM", "id": "154693" }, { "db": "PACKETSTORM", "id": "154663" }, { "db": "PACKETSTORM", "id": "178500" }, { "db": "CNNVD", "id": "CNNVD-201908-935" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "id": "VAR-201908-0263", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-160948" } ], "trust": 0.01 }, "last_update_date": "2024-07-23T19:59:26.276000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "HTTP/2 Remedial measures to achieve security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=96619" }, { "title": "Red Hat: Important: Red Hat OpenShift Service Mesh 1.0.1 RPMs", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193041 - security advisory" }, { "title": "Red Hat: Important: nghttp2 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192692 - security advisory" }, { "title": "Red Hat: Important: rh-nginx110-nginx security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192745 - security advisory" }, { "title": "Red Hat: Important: rh-nginx112-nginx security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192746 - security advisory" }, { "title": "Red Hat: Important: rh-nginx114-nginx security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192775 - security advisory" }, { "title": "Red Hat: Important: httpd24-httpd and httpd24-nghttp2 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192949 - security advisory" }, { "title": "Red Hat: Important: nginx:1.14 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192799 - security advisory" }, { "title": "Debian Security Advisories: DSA-4511-1 nghttp2 -- security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=5abd31eeab4f550ac0063c6db4c6fefa" }, { "title": "Red Hat: Important: Red Hat Quay v3.1.1 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192966 - security advisory" }, { "title": "Ubuntu Security Notice: nginx vulnerabilities", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-4099-1" }, { "title": "Red Hat: CVE-2019-9513", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2019-9513" }, { "title": "Debian CVElist Bug Report Logs: nginx: CVE-2019-9511 CVE-2019-9513 CVE-2019-9516", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=aa3f98e7e42f366cb232cf3ada195106" }, { "title": "Arch Linux Issues: ", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=cve-2019-9513" }, { "title": "Red Hat: Important: nodejs:10 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192925 - security advisory" }, { "title": "Debian Security Advisories: DSA-4505-1 nginx -- security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=b38c3ef2fccf5f32d01340c117d4ef05" }, { "title": "Red Hat: Important: rh-nodejs8-nodejs security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192955 - security advisory" }, { "title": "Red Hat: Important: rh-nodejs10-nodejs security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192939 - security advisory" }, { "title": "Amazon Linux AMI: ALAS-2019-1298", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2019-1298" }, { "title": "Arch Linux Advisories: [ASA-201908-13] nginx: denial of service", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201908-13" }, { "title": "Arch Linux Advisories: [ASA-201908-17] libnghttp2: denial of service", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201908-17" }, { "title": "Amazon Linux 2: ALAS2-2019-1298", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=alas2-2019-1298" }, { "title": "Amazon Linux AMI: ALAS-2019-1299", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2019-1299" }, { "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193932 - security advisory" }, { "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193933 - security advisory" }, { "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193935 - security advisory" }, { "title": "Arch Linux Advisories: [ASA-201908-12] nginx-mainline: denial of service", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201908-12" }, { "title": "Debian Security Advisories: DSA-4669-1 nodejs -- security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=0919b27d8bf334fac6a8fbea7195b6b0" }, { "title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - October 2019", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=1258fbf11199f28879a6fcc9f39902e9" }, { "title": "Red Hat: Important: Red Hat Fuse 7.6.0 security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20200983 - security advisory" }, { "title": "IBM: Security Bulletin: IBM Cloud Transformation Advisor is affected by vulnerabilities in WebSphere Application Server Liberty (CVE-2019-9515, CVE-2019-9518, CVE-2019-9517, CVE-2019-9512, CVE-2019-9514, CVE-2019-9513)", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=cbf2ee0b22e92590472860fdb3718cab" }, { "title": "IBM: IBM Security Bulletin: Version 8.15.0 of Node.js included in IBM Cloud Event Management 2.3.0 has several security vulnerabilities.", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=3b9c6b5fbfb51d956856e88dff5a7acd" }, { "title": "IBM: IBM Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518)", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=5ad9418973cac91ba73c01ad16b1f5a4" }, { "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities affect IBM\u00c2\u00ae SDK for Node.js\u00e2\u201e\u00a2 in IBM Cloud", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=89d19e42a01e098dd5f88e0433d2bb5d" }, { "title": "IBM: Security Bulletin: IBM Cloud Transformation Advisor is affected by a Node.js vulnerabilities", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=8f76cfb8f0c5ea84a0bc28705788f854" }, { "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=1ce0280dd79176d32c26f34906d1d4de" }, { "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=b76ff63209def4a949aa18bdf6b518b8" }, { "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM i", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=247686da02fe524817c1939b0f6b6a5c" }, { "title": "Fortinet Security Advisories: HTTP/2 Multiple DoS Attacks (VU#605641)", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=fg-ir-19-225" }, { "title": "bogeitingress", "trust": 0.1, "url": "https://github.com/lieshoujieyuan/bogeitingress " } ], "sources": [ { "db": "VULMON", "id": "CVE-2019-9513" }, { "db": "CNNVD", "id": "CNNVD-201908-935" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "NVD-CWE-Other", "trust": 1.0 }, { "problemtype": "CWE-400", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-160948" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.5, "url": "https://github.com/netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "trust": 2.5, "url": "https://www.synology.com/security/advisory/synology_sa_19_33" }, { "trust": 2.4, "url": "https://access.redhat.com/errata/rhsa-2019:3932" }, { "trust": 2.4, "url": "https://access.redhat.com/errata/rhsa-2019:3933" }, { "trust": 2.4, "url": "https://access.redhat.com/errata/rhsa-2019:3935" }, { "trust": 2.3, "url": "https://www.debian.org/security/2019/dsa-4511" }, { "trust": 2.3, "url": "https://usn.ubuntu.com/4099-1/" }, { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2019:2746" }, { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2019:2925" }, { "trust": 1.8, "url": "https://access.redhat.com/errata/rhsa-2019:2939" }, { "trust": 1.7, "url": "https://seclists.org/bugtraq/2019/aug/40" }, { "trust": 1.7, "url": "https://seclists.org/bugtraq/2019/sep/1" }, { "trust": 1.7, "url": "https://kb.cert.org/vuls/id/605641/" }, { "trust": 1.7, "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "trust": 1.7, "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "trust": 1.7, "url": "https://www.debian.org/security/2019/dsa-4505" }, { "trust": 1.7, "url": "https://www.debian.org/security/2020/dsa-4669" }, { "trust": 1.7, "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "trust": 1.7, "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2692" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2745" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2775" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2799" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2949" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2955" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:2966" }, { "trust": 1.7, "url": "https://access.redhat.com/errata/rhsa-2019:3041" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "trust": 1.7, "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "trust": 1.6, "url": "https://blogs.akamai.com/sitr/2019/08/http2-vulnerabilities.html" }, { "trust": 1.6, "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10296" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9513" }, { "trust": 1.1, "url": "https://support.f5.com/csp/article/k02591030" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/jubyaf6ed3o4xchq5c2hyenjlxyxzc4m/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/lzluypyy3rx4zjdwzrjiksulyrj4pxw7/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/" }, { "trust": 1.0, "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/" }, { "trust": 1.0, "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp%3butm_medium=rss" }, { "trust": 0.8, "url": "https://vuls.cert.org/confluence/pages/viewpage.action?pageid=56393752" }, { "trust": 0.8, "url": "https://tools.ietf.org/html/rfc7540" }, { "trust": 0.8, "url": "https://tools.ietf.org/html/rfc7541" }, { "trust": 0.8, "url": "https://blog.cloudflare.com/on-the-recent-http-2-dos-attacks/" }, { "trust": 0.8, "url": "https://blog.litespeedtech.com/2019/08/15/litespeed-addresses-http-2-dos-advisories/" }, { "trust": 0.8, "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9511https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9512https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9513https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9514https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9518" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/lzluypyy3rx4zjdwzrjiksulyrj4pxw7/" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/jubyaf6ed3o4xchq5c2hyenjlxyxzc4m/" }, { "trust": 0.7, "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/" }, { "trust": 0.7, "url": "https://access.redhat.com/security/updates/classification/#important" }, { "trust": 0.7, "url": "https://access.redhat.com/security/cve/cve-2019-9516" }, { "trust": 0.7, "url": "https://access.redhat.com/security/cve/cve-2019-9513" }, { "trust": 0.7, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.7, "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.7, "url": "https://bugzilla.redhat.com/):" }, { "trust": 0.7, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9516" }, { "trust": 0.6, "url": "https://access.redhat.com/security/cve/cve-2019-9511" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9517" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9511" }, { "trust": 0.6, "url": "https://access.redhat.com/security/cve/cve-2019-9517" }, { "trust": 0.6, "url": "https://access.redhat.com/articles/11258" }, { "trust": 0.6, "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026utm_medium=rss" }, { "trust": 0.6, "url": "http2-cves/" }, { "trust": 0.6, "url": "https://www.cloudfoundry.org/blog/various-" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9518" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9517" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9516" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9515" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9514" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9513" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9512" }, { "trust": 0.6, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9511" }, { "trust": 0.6, "url": "http://mailman.nginx.org/pipermail/nginx-announce/2019/000249.html" }, { "trust": 0.6, "url": "https://security.business.xerox.com/wp-content/uploads/2019/11/cert_xrx19-029_ffpsv2_win10_securitybulletin_nov2019.pdf" }, { "trust": 0.6, "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192254-1.html" }, { "trust": 0.6, "url": "https://support.f5.com/csp/article/k50233772" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1126605" }, { "trust": 0.6, "url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1104951" }, { "trust": 0.6, "url": "https://www.us-cert.gov/ics/advisories/icsa-19-346-01" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1165894" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1165906" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1135167" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1164346" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1164364" }, { "trust": 0.6, "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200059-1.html" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2020.1544/" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1127397" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1128387" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4645/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4403/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3597.2/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4665/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4788/" }, { "trust": 0.6, "url": "https://pivotal.io/security/cve-2019-9517" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-node-js-affect-ibm-spectrum-protect-plus-cve-2019-15606-cve-2019-15604-cve-2019-15605-cve-2019-9511-cve-2019-9516-cve-2019-9512-cve-2019-9517-cve-2019-951/" }, { "trust": 0.6, "url": "http-2-cve-2019-9515-cve-2019-9518-cve-2019-9517-cve-2019-9514-cve-2019-9512-cve-2019/" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-console-and-rest-api-are-vulnerable-to-multiple-denial-of-service-attacks-within-" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-transformation-advisor-is-affected-by-vulnerabilities-in-websphere-application-server-liberty-cve-2019-9515-cve-2019-9518-cve-2019-9517-cve-2019-9512-cve-2019-9514-c/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4596/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2020.0643/" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1143454" }, { "trust": 0.6, "url": "http2-implementation-vulnerablility/" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-websphere-liberty-susceptible-to-" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3306/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3116/" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-in-ibm-websphere-application-server-affect-ibm-sterling-b2b-integrator/" }, { "trust": 0.6, "url": "https://portal.msrc.microsoft.com/zh-cn/security-guidance/advisory/cve-2019-9513" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-kubernetes-affect-ibm-infosphere-information-server/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3299/" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/156941/red-hat-security-advisory-2020-0983-01.html" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-application-server-liberty-affect-ibm-spectrum-protect-operations-center-and-client-management-service/" }, { "trust": 0.6, "url": "http-2-implementation-used-by-watson-knowledge-catalog-for-ibm-cloud-pak-for-data/" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-is-affected-by-multiple-vulnerabilities-in-websphere-application-server-liberty/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3597.3/" }, { "trust": 0.6, "url": "https://packetstormsecurity.com/files/155414/red-hat-security-advisory-2019-3935-01.html" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1150960" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1137466" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4343/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2020.0100/" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1167160" }, { "trust": 0.6, "url": "https://vigilance.fr/vulnerability/http-2-multiple-vulnerabilities-30040" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2020.0007/" }, { "trust": 0.6, "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vyatta-5600-vrouter-software-patches-release-1801-ze-2/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.3129/" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2019.4238/" }, { "trust": 0.6, "url": "http://www.nsfocus.net/vulndb/43920" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1165852" }, { "trust": 0.6, "url": "https://www.auscert.org.au/bulletins/esb-2020.1076/" }, { "trust": 0.6, "url": "https://www.ibm.com/support/pages/node/1127853" }, { "trust": 0.5, "url": "https://access.redhat.com/security/team/key/" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0197" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5407" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17199" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17189" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-0737" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-17199" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0737" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-0217" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0734" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0217" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-0197" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-17189" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-5407" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-0196" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0196" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2018-0734" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9514" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9515" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-9512" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-9514" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-9515" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2019-9518" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9512" }, { "trust": 0.3, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9518" }, { "trust": 0.1, "url": "https://kc.mcafee.com/corporate/index?page=content\u0026amp;id=sb10296" }, { "trust": 0.1, "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp;amp;utm_medium=rss" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10174" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2015-9251" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-10184" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14379" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-11771" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-5427" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-12422" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-3888" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-5929" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-12422" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14439" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-11272" }, { "trust": 0.1, "url": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-17570" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3888" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-17570" }, { "trust": 0.1, "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.fuse\u0026version=7.6.0" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2017-5929" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2018-11771" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-14439" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-3802" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-12814" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10184" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-12384" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2018-15756" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-5427" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-15756" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-9251" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2017-16012" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-10174" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-12384" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-11272" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-3802" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-12814" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-16012" }, { "trust": 0.1, "url": "https://access.redhat.com/errata/rhsa-2020:0983" }, { "trust": 0.1, "url": "https://access.redhat.com/security/cve/cve-2019-14379" }, { "trust": 0.1, "url": "https://ubuntu.com/security/notices/usn-6754-2" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2023-44487" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2024-28182" }, { "trust": 0.1, "url": "https://launchpad.net/ubuntu/+source/nghttp2/1.59.0-1ubuntu0.1" }, { "trust": 0.1, "url": "https://ubuntu.com/security/notices/usn-6754-1" } ], "sources": [ { "db": "CERT/CC", "id": "VU#605641" }, { "db": "VULHUB", "id": "VHN-160948" }, { "db": "PACKETSTORM", "id": "155414" }, { "db": "PACKETSTORM", "id": "155417" }, { "db": "PACKETSTORM", "id": "156941" }, { "db": "PACKETSTORM", "id": "155416" }, { "db": "PACKETSTORM", "id": "154471" }, { "db": "PACKETSTORM", "id": "154693" }, { "db": "PACKETSTORM", "id": "154663" }, { "db": "PACKETSTORM", "id": "178500" }, { "db": "CNNVD", "id": "CNNVD-201908-935" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CERT/CC", "id": "VU#605641" }, { "db": "VULHUB", "id": "VHN-160948" }, { "db": "VULMON", "id": "CVE-2019-9513" }, { "db": "PACKETSTORM", "id": "155414" }, { "db": "PACKETSTORM", "id": "155417" }, { "db": "PACKETSTORM", "id": "156941" }, { "db": "PACKETSTORM", "id": "155416" }, { "db": "PACKETSTORM", "id": "154471" }, { "db": "PACKETSTORM", "id": "154693" }, { "db": "PACKETSTORM", "id": "154663" }, { "db": "PACKETSTORM", "id": "178500" }, { "db": "CNNVD", "id": "CNNVD-201908-935" }, { "db": "NVD", "id": "CVE-2019-9513" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-08-13T00:00:00", "db": "CERT/CC", "id": "VU#605641" }, { "date": "2019-08-13T00:00:00", "db": "VULHUB", "id": "VHN-160948" }, { "date": "2019-08-13T00:00:00", "db": "VULMON", "id": "CVE-2019-9513" }, { "date": "2019-11-20T23:02:22", "db": "PACKETSTORM", "id": "155414" }, { "date": "2019-11-20T21:11:11", "db": "PACKETSTORM", "id": "155417" }, { "date": "2020-03-27T13:16:40", "db": "PACKETSTORM", "id": "156941" }, { "date": "2019-11-20T20:55:55", "db": "PACKETSTORM", "id": "155416" }, { "date": "2019-09-12T14:32:51", "db": "PACKETSTORM", "id": "154471" }, { "date": "2019-09-30T22:22:22", "db": "PACKETSTORM", "id": "154693" }, { "date": "2019-09-30T13:33:33", "db": "PACKETSTORM", "id": "154663" }, { "date": "2024-05-09T15:42:01", "db": "PACKETSTORM", "id": "178500" }, { "date": "2019-08-13T00:00:00", "db": "CNNVD", "id": "CNNVD-201908-935" }, { "date": "2019-08-13T21:15:12.380000", "db": "NVD", "id": "CVE-2019-9513" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-11-19T00:00:00", "db": "CERT/CC", "id": "VU#605641" }, { "date": "2020-10-22T00:00:00", "db": "VULHUB", "id": "VHN-160948" }, { "date": "2022-08-12T00:00:00", "db": "VULMON", "id": "CVE-2019-9513" }, { "date": "2022-03-10T00:00:00", "db": "CNNVD", "id": "CNNVD-201908-935" }, { "date": "2023-11-07T03:13:42.177000", "db": "NVD", "id": "CVE-2019-9513" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "PACKETSTORM", "id": "178500" }, { "db": "CNNVD", "id": "CNNVD-201908-935" } ], "trust": 0.7 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion", "sources": [ { "db": "CERT/CC", "id": "VU#605641" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "other", "sources": [ { "db": "CNNVD", "id": "CNNVD-201908-935" } ], "trust": 0.6 } }
rhsa-2020_0983
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "A minor version update (from 7.5 to 7.6) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[2020-04-17 update: descriptions for mutiple components fixed for the same CVE added; also added golang CVE descriptions that were unintentionally ommitted from the original publication]", "title": "Topic" }, { "category": "general", "text": "This release of Red Hat Fuse 7.6.0 serves as a replacement for Red Hat Fuse 7.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* golang: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* golang: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* undertow: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* undertow: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* undertow: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods (CVE-2019-10174)\n\n* spring-security-core: mishandling of user passwords allows logging in with a password of NULL (CVE-2019-11272)\n\n* jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384)\n\n* jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379)\n\n* xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response (CVE-2019-17570)\n\n* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* logback: Serialization vulnerability in SocketServer and ServerSocketReceiver (CVE-2017-5929)\n\n* js-jquery: XSS in responses from cross-origin ajax requests (CVE-2017-16012)\n\n* apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip (CVE-2018-11771)\n\n* spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher (CVE-2019-3802)\n\n* undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed (CVE-2019-3888)\n\n* shiro: Cookie padding oracle vulnerability with default configuration (CVE-2019-12422)\n\n* jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. (CVE-2019-12814)\n\n* jackson-databind: Polymorphic typing issue related to logback/JNDI (CVE-2019-14439)\n\n* springframework: DoS Attack via Range Requests (CVE-2018-15756)\n\n* c3p0: loading XML configuration leads to denial of service (CVE-2019-5427)\n\n* undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:0983", "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.6.0", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.6.0" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "url": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/" }, { "category": "external", "summary": "1399546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399546" }, { "category": "external", "summary": "1432858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1432858" }, { "category": "external", "summary": "1591854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854" }, { "category": "external", "summary": "1618573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618573" }, { "category": "external", "summary": "1643043", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643043" }, { "category": "external", "summary": "1693777", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693777" }, { "category": "external", "summary": "1703469", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469" }, { "category": "external", "summary": "1709860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709860" }, { "category": "external", "summary": "1713068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713068" }, { "category": "external", "summary": "1725795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725795" }, { "category": "external", "summary": "1725807", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807" }, { "category": "external", "summary": "1728993", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728993" }, { "category": "external", "summary": "1730316", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730316" }, { "category": "external", "summary": "1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "1737517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "1752962", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752962" }, { "category": "external", "summary": "1774726", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774726" }, { "category": "external", "summary": "1775193", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775193" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0983.json" } ], "title": "Red Hat Security Advisory: Red Hat Fuse 7.6.0 security update", "tracking": { "current_release_date": "2024-12-15T18:56:11+00:00", "generator": { "date": "2024-12-15T18:56:11+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2020:0983", "initial_release_date": "2020-03-26T15:46:59+00:00", "revision_history": [ { "date": "2020-03-26T15:46:59+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-04-20T07:19:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:56:11+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Fuse 7.6.0", "product": { "name": "Red Hat Fuse 7.6.0", "product_id": "Red Hat Fuse 7.6.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_family", "name": "Red Hat JBoss Fuse" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "cve": "CVE-2015-9251", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2016-11-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1399546" } ], "notes": [ { "category": "description", "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", "title": "Vulnerability description" }, { "category": "summary", "text": "jquery: Cross-site scripting via cross-domain ajax requests", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-9251" }, { "category": "external", "summary": "RHBZ#1399546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399546" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-9251", "url": "https://www.cve.org/CVERecord?id=CVE-2015-9251" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-9251", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-9251" } ], "release_date": "2015-06-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jquery: Cross-site scripting via cross-domain ajax requests" }, { "cve": "CVE-2017-5929", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2017-03-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1432858" } ], "notes": [ { "category": "description", "text": "It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to execute arbitrary code through deserialization of custom gadget chains.", "title": "Vulnerability description" }, { "category": "summary", "text": "logback: Serialization vulnerability in SocketServer and ServerSocketReceiver", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-5929" }, { "category": "external", "summary": "RHBZ#1432858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1432858" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5929", "url": "https://www.cve.org/CVERecord?id=CVE-2017-5929" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5929", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5929" } ], "release_date": "2017-02-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "logback: Serialization vulnerability in SocketServer and ServerSocketReceiver" }, { "cve": "CVE-2017-16012", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2018-06-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1591854" } ], "notes": [ { "category": "description", "text": "[REJECTED CVE] This CVE has been rejected. This candidate is a duplicate of CVE-2015-9251. Note: All CVE users should reference CVE-2015-9251 instead of this candidate.", "title": "Vulnerability description" }, { "category": "summary", "text": "js-jquery: XSS in responses from cross-origin ajax requests", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-16012" }, { "category": "external", "summary": "RHBZ#1591854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-16012", "url": "https://www.cve.org/CVERecord?id=CVE-2017-16012" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-16012", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16012" } ], "release_date": "2017-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "js-jquery: XSS in responses from cross-origin ajax requests" }, { "cve": "CVE-2018-11771", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2018-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1618573" } ], "notes": [ { "category": "description", "text": "When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17\u0027s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress\u0027 zip package.", "title": "Vulnerability description" }, { "category": "summary", "text": "apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-11771" }, { "category": "external", "summary": "RHBZ#1618573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-11771", "url": "https://www.cve.org/CVERecord?id=CVE-2018-11771" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11771", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11771" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330@%3Cannounce.apache.org%3E", "url": "https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330@%3Cannounce.apache.org%3E" } ], "release_date": "2018-08-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip" }, { "cve": "CVE-2018-12536", "cwe": { "id": "CWE-209", "name": "Generation of Error Message Containing Sensitive Information" }, "discovery_date": "2018-06-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1597418" } ], "notes": [ { "category": "description", "text": "In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn\u0027t match a dynamic url-pattern, and is eventually handled by the DefaultServlet\u0027s static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.", "title": "Vulnerability description" }, { "category": "summary", "text": "jetty: full server path revealed when using the default Error Handling", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-12536" }, { "category": "external", "summary": "RHBZ#1597418", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1597418" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12536", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12536" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12536", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12536" } ], "release_date": "2018-06-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "Information disclosure occurs when java.nio.file.InvalidPathException occurs and is handled by the default Jetty error handler. To protect against this, a custom error handler can be configured for that particular error or for a larger set of errors according to the documentation link below. Red Hat Product Security advises that production deployments on Jetty use custom error handlers to limit the information disclosed and to ensure effective logging of error conditions.\n\nhttp://www.eclipse.org/jetty/documentation/current/custom-error-pages.html", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "jetty: full server path revealed when using the default Error Handling" }, { "cve": "CVE-2018-15756", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2018-10-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1643043" } ], "notes": [ { "category": "description", "text": "Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.", "title": "Vulnerability description" }, { "category": "summary", "text": "springframework: DoS Attack via Range Requests", "title": "Vulnerability summary" }, { "category": "other", "text": "The package rhvm-dependencies does not include the vulnerable spring-webmvc component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-15756" }, { "category": "external", "summary": "RHBZ#1643043", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643043" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-15756", "url": "https://www.cve.org/CVERecord?id=CVE-2018-15756" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-15756", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15756" }, { "category": "external", "summary": "https://pivotal.io/security/cve-2018-15756", "url": "https://pivotal.io/security/cve-2018-15756" } ], "release_date": "2018-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "springframework: DoS Attack via Range Requests" }, { "cve": "CVE-2019-3802", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2019-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1730316" } ], "notes": [ { "category": "description", "text": "This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.", "title": "Vulnerability description" }, { "category": "summary", "text": "spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-3802" }, { "category": "external", "summary": "RHBZ#1730316", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730316" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3802", "url": "https://www.cve.org/CVERecord?id=CVE-2019-3802" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3802", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3802" }, { "category": "external", "summary": "https://pivotal.io/security/cve-2019-3802", "url": "https://pivotal.io/security/cve-2019-3802" } ], "release_date": "2019-07-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher" }, { "acknowledgments": [ { "names": [ "Carter Kozak" ] } ], "cve": "CVE-2019-3888", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "discovery_date": "2019-03-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1693777" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)", "title": "Vulnerability description" }, { "category": "summary", "text": "undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-3888" }, { "category": "external", "summary": "RHBZ#1693777", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693777" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3888", "url": "https://www.cve.org/CVERecord?id=CVE-2019-3888" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3888", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3888" } ], "release_date": "2019-06-10T15:13:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed" }, { "cve": "CVE-2019-5427", "cwe": { "id": "CWE-776", "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)" }, "discovery_date": "2019-04-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1709860" } ], "notes": [ { "category": "description", "text": "c3p0 version \u003c 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.", "title": "Vulnerability description" }, { "category": "summary", "text": "c3p0: loading XML configuration leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Satellite 6 is not vulnerable to this issue, because the candlepin component who uses the c3p0 jar never passes a XML configuration file to c3p0, even though it includes a vulnerable version of the latter. Since this issue requires a XML files to be loaded by c3p0, an exploitation path doesn\u0027t exist.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5427" }, { "category": "external", "summary": "RHBZ#1709860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5427", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5427" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5427", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5427" } ], "release_date": "2019-04-17T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "c3p0: loading XML configuration leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9512", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735645" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PING frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9512" }, { "category": "external", "summary": "RHBZ#1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PING frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9514", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735744" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9514" }, { "category": "external", "summary": "RHBZ#1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9515", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735745" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9515" }, { "category": "external", "summary": "RHBZ#1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9518", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735749" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using empty frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9518" }, { "category": "external", "summary": "RHBZ#1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using empty frames results in excessive resource consumption" }, { "cve": "CVE-2019-10174", "cwe": { "id": "CWE-470", "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)" }, "discovery_date": "2018-10-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1703469" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan\u0027s privileges. The attacker can use reflection to introduce new, malicious behavior into the application.", "title": "Vulnerability description" }, { "category": "summary", "text": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat OpenStack Platform\u0027s OpenDaylight contains the vulnerable library. This library is a requirement of other dependencies (Karaf and Hibernate). Under supported deployments, the vulnerable functionality is not utilized. Based on this, no OpenDaylight versions will not be fixed.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-10174" }, { "category": "external", "summary": "RHBZ#1703469", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10174", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10174" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174" } ], "release_date": "2019-11-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "There is no known mitigation for this issue.", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods" }, { "acknowledgments": [ { "names": [ "Christian Schl\u00fcter" ], "organization": "Viada" } ], "cve": "CVE-2019-10184", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2019-03-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1713068" } ], "notes": [ { "category": "description", "text": "undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.", "title": "Vulnerability description" }, { "category": "summary", "text": "undertow: Information leak in requests for directories without trailing slashes", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-10184" }, { "category": "external", "summary": "RHBZ#1713068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713068" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10184", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10184" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10184", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10184" } ], "release_date": "2019-07-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "undertow: Information leak in requests for directories without trailing slashes" }, { "cve": "CVE-2019-10241", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2019-04-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1705924" } ], "notes": [ { "category": "description", "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.", "title": "Vulnerability description" }, { "category": "summary", "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-10241" }, { "category": "external", "summary": "RHBZ#1705924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241" } ], "release_date": "2019-04-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions" }, { "cve": "CVE-2019-10247", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2019-04-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1705993" } ], "notes": [ { "category": "description", "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.", "title": "Vulnerability description" }, { "category": "summary", "text": "jetty: error path information disclosure", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-10247" }, { "category": "external", "summary": "RHBZ#1705993", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247", "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247" } ], "release_date": "2019-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "jetty: error path information disclosure" }, { "cve": "CVE-2019-11272", "cwe": { "id": "CWE-305", "name": "Authentication Bypass by Primary Weakness" }, "discovery_date": "2019-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1728993" } ], "notes": [ { "category": "description", "text": "A flaw was found in Spring Security in several versions, in the use of plain text passwords using the PlaintextPasswordEncoder. If an application is using an affected version of Spring Security with the PlaintextPasswordEncoder and a user has a null encoded password, an attacker can use this flaw to authenticate using a password of \"null.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "spring-security-core: mishandling of user passwords allows logging in with a password of NULL", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat OpenStack Platform\u0027s OpenDaylight versions 9 and 10 contain the vulnerable code. However, these OpenDaylight versions were released as technical preview with limited support and will therefore not be updated. Other OpenDaylight versions do not contain the vulnerable library.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11272" }, { "category": "external", "summary": "RHBZ#1728993", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728993" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11272", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11272" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11272", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11272" }, { "category": "external", "summary": "https://pivotal.io/security/cve-2019-11272", "url": "https://pivotal.io/security/cve-2019-11272" } ], "release_date": "2019-07-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "spring-security-core: mishandling of user passwords allows logging in with a password of NULL" }, { "cve": "CVE-2019-12384", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2019-06-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1725807" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in FasterXML jackson-databind in versions prior to 2.9.9. The vulnerability would permit polymorphic deserialization of malicious objects using the logback-core gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. Depending on the classpath content, remote code execution may be possible.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat OpenStack\u0027s OpenDaylight does not use logback in any supported configuration. Therefore, the prerequisites for this vulnerability are not present and OpenDaylight is not affected.\n\nThis vulnerability relies on logback-core (ch.qos.logback.core) being present in the application\u0027s ClassPath. Logback-core is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use logback-core are not impacted by this vulnerability.\n\nThis issue affects the versions of jackson-databind bundled with candlepin as shipped with Red Hat Satellite 6.x. However the affected code is NOT used at this time.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12384" }, { "category": "external", "summary": "RHBZ#1725807", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12384", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12384" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384" } ], "release_date": "2019-06-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution" }, { "cve": "CVE-2019-12422", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774726" } ], "notes": [ { "category": "description", "text": "Apache Shiro before 1.4.2, when using the default \"remember me\" configuration, cookies could be susceptible to a padding attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "shiro: Cookie padding oracle vulnerability with default configuration", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12422" }, { "category": "external", "summary": "RHBZ#1774726", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774726" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12422", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12422" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12422", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12422" } ], "release_date": "2019-11-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "shiro: Cookie padding oracle vulnerability with default configuration" }, { "cve": "CVE-2019-12814", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2019-06-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1725795" } ], "notes": [ { "category": "description", "text": "A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x through 2.9.9. With default typing enabled, an attacker can send a specifically crafted JSON message to the server that allows them to read arbitrary local files.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.", "title": "Vulnerability summary" }, { "category": "other", "text": "* Red Hat Satellite 6 does not include the jdom or jdom2 packages, thus it is not affected by this vulnerability. \n* Red Hat OpenStack\u0027s OpenDaylight does not include the jdom or jdom2 packages, thus it is not affected by this vulnerability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12814" }, { "category": "external", "summary": "RHBZ#1725795", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725795" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12814", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12814" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12814", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12814" } ], "release_date": "2019-06-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "This vulnerability relies on jdom (org.jdom) or jdom2 (org.jdom2) being present in the application\u0027s ClassPath. Applications using jackson-databind that do not also use jdom or jdom2 are not impacted by this vulnerability.", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message." }, { "cve": "CVE-2019-14379", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2019-07-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1737517" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache and logback JNDI gadgets when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: default typing mishandling leading to remote code execution", "title": "Vulnerability summary" }, { "category": "other", "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nSimilarly, Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14379" }, { "category": "external", "summary": "RHBZ#1737517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14379", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14379" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379" } ], "release_date": "2019-07-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jackson-databind: default typing mishandling leading to remote code execution" }, { "cve": "CVE-2019-14439", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2019-07-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1752962" } ], "notes": [ { "category": "description", "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.", "title": "Vulnerability description" }, { "category": "summary", "text": "jackson-databind: Polymorphic typing issue related to logback/JNDI", "title": "Vulnerability summary" }, { "category": "other", "text": "OpenDaylight provided as part of Red Hat OpenStack does not utilize logback when used in a supported configuration. Therefore, the prerequisites for this vulnerability are not present and OpenDaylight is not affected.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14439" }, { "category": "external", "summary": "RHBZ#1752962", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752962" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14439", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14439" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14439", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14439" } ], "release_date": "2019-07-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jackson-databind: Polymorphic typing issue related to logback/JNDI" }, { "acknowledgments": [ { "names": [ "Guillaume Teissier" ], "organization": "Orange" } ], "cve": "CVE-2019-17570", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1775193" } ], "notes": [ { "category": "description", "text": "A flaw was discovered where the XMLRPC client implementation in Apache XMLRPC, performed deserialization of the server-side exception serialized in the faultCause attribute of XMLRPC error response messages. A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrary code with the privileges of an application using the Apache XMLRPC client library.", "title": "Vulnerability description" }, { "category": "summary", "text": "xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 7 provides vulnerable version of xmlrpc via the Optional repository. As the Optional repository is not supported, this issue is not planned to be addressed there.\n\nRed Hat Virtualization Manager uses xmlrpc only for internal communication with the scheduler. Since this is a component of the Manager itself, it is not subject to attacker influence and does not represent an attack surface.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat Fuse 7.6.0" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17570" }, { "category": "external", "summary": "RHBZ#1775193", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775193" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17570", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17570" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17570", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17570" }, { "category": "external", "summary": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp", "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp" } ], "release_date": "2020-01-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-03-26T15:46:59+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/", "product_ids": [ "Red Hat Fuse 7.6.0" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:0983" }, { "category": "workaround", "details": "There is no known mitigation other than restricting applications using the Apache XMLRPC client library from sending requests to untrusted XMLRPC servers.", "product_ids": [ "Red Hat Fuse 7.6.0" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "Red Hat Fuse 7.6.0" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response" } ] }
rhsa-2019_2745
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-nginx110-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2745", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2745.json" } ], "title": "Red Hat Security Advisory: rh-nginx110-nginx security update", "tracking": { "current_release_date": "2024-12-15T18:54:56+00:00", "generator": { "date": "2024-12-15T18:54:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2745", "initial_release_date": "2019-09-13T08:40:34+00:00", "revision_history": [ { "date": "2019-09-13T08:40:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-13T08:40:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "product": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "product": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "product": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "product": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" }, "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:40:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:40:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:40:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64", "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" } ] }
rhsa-2019_2966
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Quay packages that fix several bugs and add various enhancements are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Quay 3.1.1 errata release, including:\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Fixed repository mirror credentials properly escaped to allow special characters\n* Fixed repository mirror UI cancel button enabled\n* Fixed repository mirror UI change next sync date", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2966", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1750473", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1750473" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2966.json" } ], "title": "Red Hat Security Advisory: Red Hat Quay v3.1.1 security update", "tracking": { "current_release_date": "2024-12-15T18:55:40+00:00", "generator": { "date": "2024-12-15T18:55:40+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2966", "initial_release_date": "2019-10-03T18:57:22+00:00", "revision_history": [ { "date": "2019-10-03T18:57:22+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-03T18:57:22+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:40+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Quay v3", "product": { "name": "Quay v3", "product_id": "7Server-RH7-Quay-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3::el7" } } } ], "category": "product_family", "name": "Red Hat Quay" }, { "branches": [ { "category": "product_version", "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64", "product": { "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64", "product_id": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64", "product_identification_helper": { "purl": "pkg:oci/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821?arch=amd64\u0026repository_url=registry.redhat.io/quay3/clair-jwt\u0026tag=v2.0.9-7" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64 as a component of Quay v3", "product_id": "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" }, "product_reference": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64", "relates_to_product_reference": "7Server-RH7-Quay-3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-03T18:57:22+00:00", "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9512", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735645" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PING frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9512" }, { "category": "external", "summary": "RHBZ#1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-03T18:57:22+00:00", "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2966" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "HTTP/2: flood using PING frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-03T18:57:22+00:00", "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9514", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735744" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9514" }, { "category": "external", "summary": "RHBZ#1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-03T18:57:22+00:00", "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2966" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-03T18:57:22+00:00", "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" } ] }
rhsa-2019_3041
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Service Mesh 1.0.1.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Service Mesh is Red Hat\u0027s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.\n\nThis advisory covers the RPM packages for the OpenShift Service Mesh 1.0.1 release.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:3041", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "MAISTRA-977", "url": "https://issues.redhat.com/browse/MAISTRA-977" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3041.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.1 RPMs", "tracking": { "current_release_date": "2024-12-15T18:55:45+00:00", "generator": { "date": "2024-12-15T18:55:45+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:3041", "initial_release_date": "2019-10-14T16:55:21+00:00", "revision_history": [ { "date": "2019-10-14T16:55:21+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-14T16:55:21+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:45+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Service Mesh 1.0", "product": { "name": "OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:1.0::el8" } } }, { "category": "product_name", "name": "Red Hat OpenShift Service Mesh 1.0", "product": { "name": "Red Hat OpenShift Service Mesh 1.0", "product_id": "7Server-RH7-RHOSSM-1.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:1.0::el7" } } } ], "category": "product_family", "name": "Red Hat OpenShift Service Mesh" }, { "branches": [ { "category": "product_version", "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-cni-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-cni@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-operator-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-operator@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "product": { "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "product_id": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-prometheus@2.7.2-22.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-citadel-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-citadel@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-galley-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-galley@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-istioctl@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-mixc-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-mixc@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-mixs-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-mixs@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-pilot-agent@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-pilot-discovery@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64", "product": { "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64", "product_id": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-sidecar-injector@1.0.1-8.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64", "product": { "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64", "product_id": "servicemesh-grafana-0:6.2.2-21.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana@6.2.2-21.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "product": { "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "product_id": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana-prometheus@6.2.2-21.el8?arch=x86_64" } } }, { "category": "product_version", "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64", "product": { "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64", "product_id": "servicemesh-proxy-0:1.0.1-7.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-proxy@1.0.1-7.el8?arch=x86_64" } } }, { "category": "product_version", "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64", "product": { "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64", "product_id": "kiali-0:v1.0.6.redhat1-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/kiali@v1.0.6.redhat1-1.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "servicemesh-cni-0:1.0.1-8.el8.src", "product": { "name": "servicemesh-cni-0:1.0.1-8.el8.src", "product_id": "servicemesh-cni-0:1.0.1-8.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-cni@1.0.1-8.el8?arch=src" } } }, { "category": "product_version", "name": "servicemesh-operator-0:1.0.1-8.el8.src", "product": { "name": "servicemesh-operator-0:1.0.1-8.el8.src", "product_id": "servicemesh-operator-0:1.0.1-8.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-operator@1.0.1-8.el8?arch=src" } } }, { "category": "product_version", "name": "servicemesh-prometheus-0:2.7.2-22.el8.src", "product": { "name": "servicemesh-prometheus-0:2.7.2-22.el8.src", "product_id": "servicemesh-prometheus-0:2.7.2-22.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-prometheus@2.7.2-22.el8?arch=src" } } }, { "category": "product_version", "name": "servicemesh-0:1.0.1-8.el8.src", "product": { "name": "servicemesh-0:1.0.1-8.el8.src", "product_id": "servicemesh-0:1.0.1-8.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh@1.0.1-8.el8?arch=src" } } }, { "category": "product_version", "name": "servicemesh-grafana-0:6.2.2-21.el8.src", "product": { "name": "servicemesh-grafana-0:6.2.2-21.el8.src", "product_id": "servicemesh-grafana-0:6.2.2-21.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-grafana@6.2.2-21.el8?arch=src" } } }, { "category": "product_version", "name": "servicemesh-proxy-0:1.0.1-7.el8.src", "product": { "name": "servicemesh-proxy-0:1.0.1-7.el8.src", "product_id": "servicemesh-proxy-0:1.0.1-7.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/servicemesh-proxy@1.0.1-7.el8?arch=src" } } }, { "category": "product_version", "name": "kiali-0:v1.0.6.redhat1-1.el7.src", "product": { "name": "kiali-0:v1.0.6.redhat1-1.el7.src", "product_id": "kiali-0:v1.0.6.redhat1-1.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/kiali@v1.0.6.redhat1-1.el7?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kiali-0:v1.0.6.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0", "product_id": "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src" }, "product_reference": "kiali-0:v1.0.6.redhat1-1.el7.src", "relates_to_product_reference": "7Server-RH7-RHOSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "kiali-0:v1.0.6.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0", "product_id": "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64" }, "product_reference": "kiali-0:v1.0.6.redhat1-1.el7.x86_64", "relates_to_product_reference": "7Server-RH7-RHOSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src" }, "product_reference": "servicemesh-0:1.0.1-8.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-citadel-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-citadel-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-cni-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src" }, "product_reference": "servicemesh-cni-0:1.0.1-8.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-cni-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-cni-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-galley-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-galley-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana-0:6.2.2-21.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src" }, "product_reference": "servicemesh-grafana-0:6.2.2-21.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana-0:6.2.2-21.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64" }, "product_reference": "servicemesh-grafana-0:6.2.2-21.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64" }, "product_reference": "servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-mixc-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-mixc-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-mixs-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-mixs-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-operator-0:1.0.1-8.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src" }, "product_reference": "servicemesh-operator-0:1.0.1-8.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-operator-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-operator-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-prometheus-0:2.7.2-22.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src" }, "product_reference": "servicemesh-prometheus-0:2.7.2-22.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64" }, "product_reference": "servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-proxy-0:1.0.1-7.el8.src as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src" }, "product_reference": "servicemesh-proxy-0:1.0.1-7.el8.src", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-proxy-0:1.0.1-7.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64" }, "product_reference": "servicemesh-proxy-0:1.0.1-7.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" }, { "category": "default_component_of", "full_product_name": { "name": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64 as a component of OpenShift Service Mesh 1.0", "product_id": "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" }, "product_reference": "servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64", "relates_to_product_reference": "8Base-OSSM-1.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-14T16:55:21+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe OpenShift Service Mesh release notes provide information on the features and known issues:\n\nhttps://docs.openshift.com/container-platform/4.1/service_mesh/servicemesh-release-notes.html", "product_ids": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-14T16:55:21+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe OpenShift Service Mesh release notes provide information on the features and known issues:\n\nhttps://docs.openshift.com/container-platform/4.1/service_mesh/servicemesh-release-notes.html", "product_ids": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.src", "7Server-RH7-RHOSSM-1.0:kiali-0:v1.0.6.redhat1-1.el7.x86_64", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-citadel-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-cni-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-galley-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.src", "8Base-OSSM-1.0:servicemesh-grafana-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-grafana-prometheus-0:6.2.2-21.el8.x86_64", "8Base-OSSM-1.0:servicemesh-istioctl-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixc-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-mixs-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.src", "8Base-OSSM-1.0:servicemesh-operator-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-agent-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-pilot-discovery-0:1.0.1-8.el8.x86_64", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.src", "8Base-OSSM-1.0:servicemesh-prometheus-0:2.7.2-22.el8.x86_64", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.src", "8Base-OSSM-1.0:servicemesh-proxy-0:1.0.1-7.el8.x86_64", "8Base-OSSM-1.0:servicemesh-sidecar-injector-0:1.0.1-8.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" } ] }
rhsa-2019_3932
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:3932", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "JBCS-798", "url": "https://issues.redhat.com/browse/JBCS-798" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3932.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6", "tracking": { "current_release_date": "2024-12-15T18:56:04+00:00", "generator": { "date": "2024-12-15T18:56:04+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:3932", "initial_release_date": "2019-11-20T16:22:09+00:00", "revision_history": [ { "date": "2019-11-20T16:22:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-01-06T13:05:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:56:04+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 6 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el6" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "product": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "product": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "product": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "product": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "product": { "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el6?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-0734", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1644364" } ], "notes": [ { "category": "description", "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: timing side channel attack in the DSA signature algorithm", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0734" }, { "category": "external", "summary": "RHBZ#1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734" } ], "release_date": "2018-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: timing side channel attack in the DSA signature algorithm" }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568253" } ], "notes": [ { "category": "description", "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0737" }, { "category": "external", "summary": "RHBZ#1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3", "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20180416.txt", "url": "https://www.openssl.org/news/secadv/20180416.txt" } ], "release_date": "2018-04-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys" }, { "acknowledgments": [ { "names": [ "Alejandro Cabrera Aldaya" ], "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba" }, { "names": [ "Billy Bob Brumley", "Cesar Pereida Garcia", "Sohaib ul Hassan" ] }, { "names": [ "Nicola Tuveri" ], "organization": "Tampere University of Technology; Finland" } ], "cve": "CVE-2018-5407", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2018-11-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1645695" } ], "notes": [ { "category": "description", "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-5407" }, { "category": "external", "summary": "RHBZ#1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407", "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407" }, { "category": "external", "summary": "https://github.com/bbbrumley/portsmash", "url": "https://github.com/bbbrumley/portsmash" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20181112.txt", "url": "https://www.openssl.org/news/secadv/20181112.txt" } ], "release_date": "2018-10-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue. Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)" }, { "cve": "CVE-2018-17189", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668497" } ], "notes": [ { "category": "description", "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: DoS via slow, unneeded request bodies", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17189" }, { "category": "external", "summary": "RHBZ#1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: DoS via slow, unneeded request bodies" }, { "cve": "CVE-2018-17199", "cwe": { "id": "CWE-613", "name": "Insufficient Session Expiration" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668493" } ], "notes": [ { "category": "description", "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_session_cookie does not respect expiry time", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17199" }, { "category": "external", "summary": "RHBZ#1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_session_cookie does not respect expiry time" }, { "cve": "CVE-2019-0196", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695030" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: read-after-free on a string compare", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0196" }, { "category": "external", "summary": "RHBZ#1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: read-after-free on a string compare" }, { "cve": "CVE-2019-0197", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695042" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: possible crash on late upgrade", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0197" }, { "category": "external", "summary": "RHBZ#1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-02-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: possible crash on late upgrade" }, { "cve": "CVE-2019-0217", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695020" } ], "notes": [ { "category": "description", "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_auth_digest: access control bypass due to race condition", "title": "Vulnerability summary" }, { "category": "other", "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0217" }, { "category": "external", "summary": "RHBZ#1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation. In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_auth_digest: access control bypass due to race condition" }, { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:22:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" } ] }
rhsa-2019_3933
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for JBoss Core Services on RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)\n* openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)\n* mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)\n* openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)\n* mod_session_cookie does not respect expiry time (CVE-2018-17199)\n* mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)\n* mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n* nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:3933", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "JBCS-798", "url": "https://issues.redhat.com/browse/JBCS-798" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3933.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7", "tracking": { "current_release_date": "2024-12-15T18:55:58+00:00", "generator": { "date": "2024-12-15T18:55:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:3933", "initial_release_date": "2019-11-20T16:14:21+00:00", "revision_history": [ { "date": "2019-11-20T16:14:21+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-01-06T13:04:40+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "product": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "product": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "product": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "product": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-0734", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1644364" } ], "notes": [ { "category": "description", "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: timing side channel attack in the DSA signature algorithm", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0734" }, { "category": "external", "summary": "RHBZ#1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734" } ], "release_date": "2018-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: timing side channel attack in the DSA signature algorithm" }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568253" } ], "notes": [ { "category": "description", "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0737" }, { "category": "external", "summary": "RHBZ#1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3", "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20180416.txt", "url": "https://www.openssl.org/news/secadv/20180416.txt" } ], "release_date": "2018-04-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys" }, { "acknowledgments": [ { "names": [ "Alejandro Cabrera Aldaya" ], "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba" }, { "names": [ "Billy Bob Brumley", "Cesar Pereida Garcia", "Sohaib ul Hassan" ] }, { "names": [ "Nicola Tuveri" ], "organization": "Tampere University of Technology; Finland" } ], "cve": "CVE-2018-5407", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2018-11-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1645695" } ], "notes": [ { "category": "description", "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-5407" }, { "category": "external", "summary": "RHBZ#1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407", "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407" }, { "category": "external", "summary": "https://github.com/bbbrumley/portsmash", "url": "https://github.com/bbbrumley/portsmash" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20181112.txt", "url": "https://www.openssl.org/news/secadv/20181112.txt" } ], "release_date": "2018-10-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue. Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)" }, { "cve": "CVE-2018-17189", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668497" } ], "notes": [ { "category": "description", "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: DoS via slow, unneeded request bodies", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17189" }, { "category": "external", "summary": "RHBZ#1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: DoS via slow, unneeded request bodies" }, { "cve": "CVE-2018-17199", "cwe": { "id": "CWE-613", "name": "Insufficient Session Expiration" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668493" } ], "notes": [ { "category": "description", "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_session_cookie does not respect expiry time", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17199" }, { "category": "external", "summary": "RHBZ#1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_session_cookie does not respect expiry time" }, { "cve": "CVE-2019-0196", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695030" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: read-after-free on a string compare", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0196" }, { "category": "external", "summary": "RHBZ#1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: read-after-free on a string compare" }, { "cve": "CVE-2019-0197", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695042" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: possible crash on late upgrade", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0197" }, { "category": "external", "summary": "RHBZ#1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-02-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: possible crash on late upgrade" }, { "cve": "CVE-2019-0217", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695020" } ], "notes": [ { "category": "description", "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_auth_digest: access control bypass due to race condition", "title": "Vulnerability summary" }, { "category": "other", "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0217" }, { "category": "external", "summary": "RHBZ#1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation. In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_auth_digest: access control bypass due to race condition" }, { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:14:21+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" } ] }
rhsa-2019_2939
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-nodejs10-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs10-nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2939", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2939.json" } ], "title": "Red Hat Security Advisory: rh-nodejs10-nodejs security update", "tracking": { "current_release_date": "2024-12-15T18:55:08+00:00", "generator": { "date": "2024-12-15T18:55:08+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2939", "initial_release_date": "2019-10-01T10:03:49+00:00", "revision_history": [ { "date": "2019-10-01T10:03:49+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-01T10:03:49+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:08+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "product": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "product": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "product": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "product": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-0:3.2-3.el7.ppc64le", "product": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le", "product_id": "rh-nodejs10-0:3.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "product": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "product": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "product": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "product": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "product": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "product": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-0:3.2-3.el7.s390x", "product": { "name": "rh-nodejs10-0:3.2-3.el7.s390x", "product_id": "rh-nodejs10-0:3.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "product": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "product": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "product": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "product": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "product": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "product": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-0:3.2-3.el7.aarch64", "product": { "name": "rh-nodejs10-0:3.2-3.el7.aarch64", "product_id": "rh-nodejs10-0:3.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "product": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "product": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "product": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=src" } } }, { "category": "product_version", "name": "rh-nodejs10-0:3.2-3.el7.src", "product": { "name": "rh-nodejs10-0:3.2-3.el7.src", "product_id": "rh-nodejs10-0:3.2-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "product": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "product_id": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-docs@10.16.3-3.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "product": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "product": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "product": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "product": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-0:3.2-3.el7.x86_64", "product": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64", "product_id": "rh-nodejs10-0:3.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "product": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "product": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64" }, "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch" }, "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64" }, "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" }, "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-12121", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2018-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1661002" } ], "notes": [ { "category": "description", "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Denial of Service with large HTTP headers", "title": "Vulnerability summary" }, { "category": "other", "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-12121" }, { "category": "external", "summary": "RHBZ#1661002", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12121", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12121" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121" } ], "release_date": "2018-11-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nodejs: Denial of Service with large HTTP headers" }, { "cve": "CVE-2018-12122", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2018-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1661005" } ], "notes": [ { "category": "description", "text": "It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Slowloris HTTP Denial of Service", "title": "Vulnerability summary" }, { "category": "other", "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-12122" }, { "category": "external", "summary": "RHBZ#1661005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12122", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122" } ], "release_date": "2018-11-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: Slowloris HTTP Denial of Service" }, { "cve": "CVE-2018-12123", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2018-11-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1661010" } ], "notes": [ { "category": "description", "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Hostname spoofing in URL parser for javascript protocol", "title": "Vulnerability summary" }, { "category": "other", "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-12123" }, { "category": "external", "summary": "RHBZ#1661010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12123", "url": "https://www.cve.org/CVERecord?id=CVE-2018-12123" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123" } ], "release_date": "2018-11-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: Hostname spoofing in URL parser for javascript protocol" }, { "cve": "CVE-2019-5737", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-03-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1690808" } ], "notes": [ { "category": "description", "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5737" }, { "category": "external", "summary": "RHBZ#1690808", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737" }, { "category": "external", "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/", "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/" } ], "release_date": "2019-02-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass" }, { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9512", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735645" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PING frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9512" }, { "category": "external", "summary": "RHBZ#1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PING frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9514", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735744" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9514" }, { "category": "external", "summary": "RHBZ#1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9515", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735745" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9515" }, { "category": "external", "summary": "RHBZ#1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9518", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735749" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using empty frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9518" }, { "category": "external", "summary": "RHBZ#1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T10:03:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2939" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using empty frames results in excessive resource consumption" } ] }
rhsa-2019_2692
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for nghttp2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2692", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2692.json" } ], "title": "Red Hat Security Advisory: nghttp2 security update", "tracking": { "current_release_date": "2024-12-15T18:54:22+00:00", "generator": { "date": "2024-12-15T18:54:22+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2692", "initial_release_date": "2019-09-09T20:13:58+00:00", "revision_history": [ { "date": "2019-09-09T20:13:58+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-09T20:13:58+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:22+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat CodeReady Linux Builder (v. 8)", "product": { "name": "Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "product": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=i686" } } }, { "category": "product_version", "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "product": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=i686" } } }, { "category": "product_version", "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=i686" } } }, { "category": "product_version", "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=i686" } } }, { "category": "product_version", "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686", "product": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686", "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=x86_64" } } }, { "category": "product_version", "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64", "product_id": "nghttp2-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=x86_64" } } }, { "category": "product_version", "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=x86_64" } } }, { "category": "product_version", "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=x86_64" } } }, { "category": "product_version", "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=x86_64" } } }, { "category": "product_version", "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "product": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=ppc64le" } } }, { "category": "product_version", "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=ppc64le" } } }, { "category": "product_version", "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=ppc64le" } } }, { "category": "product_version", "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=ppc64le" } } }, { "category": "product_version", "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=ppc64le" } } }, { "category": "product_version", "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=s390x" } } }, { "category": "product_version", "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x", "product_id": "nghttp2-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=s390x" } } }, { "category": "product_version", "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=s390x" } } }, { "category": "product_version", "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=s390x" } } }, { "category": "product_version", "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=s390x" } } }, { "category": "product_version", "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x", "product": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x", "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "product_id": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-devel@1.33.0-1.el8_0.1?arch=aarch64" } } }, { "category": "product_version", "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64", "product_id": "nghttp2-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=aarch64" } } }, { "category": "product_version", "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "product_id": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debugsource@1.33.0-1.el8_0.1?arch=aarch64" } } }, { "category": "product_version", "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product_id": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2-debuginfo@1.33.0-1.el8_0.1?arch=aarch64" } } }, { "category": "product_version", "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product_id": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2-debuginfo@1.33.0-1.el8_0.1?arch=aarch64" } } }, { "category": "product_version", "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "product": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "product_id": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libnghttp2@1.33.0-1.el8_0.1?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nghttp2-0:1.33.0-1.el8_0.1.src", "product": { "name": "nghttp2-0:1.33.0-1.el8_0.1.src", "product_id": "nghttp2-0:1.33.0-1.el8_0.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nghttp2@1.33.0-1.el8_0.1?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.src", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.src as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.src", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "relates_to_product_reference": "CRB-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)", "product_id": "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" }, "product_reference": "nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "relates_to_product_reference": "CRB-8.0.0.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-09T20:13:58+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-09T20:13:58+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "BaseOS-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "BaseOS-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:libnghttp2-devel-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.src", "CRB-8.0.0.Z:nghttp2-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debuginfo-0:1.33.0-1.el8_0.1.x86_64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.aarch64", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.i686", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.ppc64le", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.s390x", "CRB-8.0.0.Z:nghttp2-debugsource-0:1.33.0-1.el8_0.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" } ] }
rhsa-2019_2746
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-nginx112-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2746", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2746.json" } ], "title": "Red Hat Security Advisory: rh-nginx112-nginx security update", "tracking": { "current_release_date": "2024-12-15T18:54:49+00:00", "generator": { "date": "2024-12-15T18:54:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2746", "initial_release_date": "2019-09-13T08:46:52+00:00", "revision_history": [ { "date": "2019-09-13T08:46:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-13T08:46:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "product": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "product": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "product": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "product": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-perl@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "product": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" }, "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:46:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:46:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-13T08:46:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" } ] }
rhsa-2019_2955
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.1).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2955", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2955.json" } ], "title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update", "tracking": { "current_release_date": "2024-12-15T18:55:21+00:00", "generator": { "date": "2024-12-15T18:55:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2955", "initial_release_date": "2019-10-02T14:29:13+00:00", "revision_history": [ { "date": "2019-10-02T14:29:13+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-02T14:29:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-0:3.0-5.el7.ppc64le", "product": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le", "product_id": "rh-nodejs8-0:3.0-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "product": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "product": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "product": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "product": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "product": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "product": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-0:3.0-5.el7.s390x", "product": { "name": "rh-nodejs8-0:3.0-5.el7.s390x", "product_id": "rh-nodejs8-0:3.0-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "product": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "product": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "product": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "product": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "product": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "product": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-0:3.0-5.el7.aarch64", "product": { "name": "rh-nodejs8-0:3.0-5.el7.aarch64", "product_id": "rh-nodejs8-0:3.0-5.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "product": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "product": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "product": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "product": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "product": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=aarch64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "product": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-0:3.0-5.el7.src", "product": { "name": "rh-nodejs8-0:3.0-5.el7.src", "product_id": "rh-nodejs8-0:3.0-5.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=src" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "product": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-0:3.0-5.el7.x86_64", "product": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64", "product_id": "rh-nodejs8-0:3.0-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "product": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "product": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "product": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "product": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "product": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "product": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "product": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "product_id": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.16.1-2.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64" }, "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch" }, "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64" }, "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" }, "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9512", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735645" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PING frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9512" }, { "category": "external", "summary": "RHBZ#1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PING frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9514", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735744" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9514" }, { "category": "external", "summary": "RHBZ#1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9515", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735745" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9515" }, { "category": "external", "summary": "RHBZ#1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9518", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735749" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using empty frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9518" }, { "category": "external", "summary": "RHBZ#1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-02T14:29:13+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2955" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x", "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using empty frames results in excessive resource consumption" } ] }
rhsa-2019_3935
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 zip release\nfor RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:3935", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "JBCS-798", "url": "https://issues.redhat.com/browse/JBCS-798" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3935.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release", "tracking": { "current_release_date": "2024-12-15T18:55:51+00:00", "generator": { "date": "2024-12-15T18:55:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:3935", "initial_release_date": "2019-11-20T16:08:18+00:00", "revision_history": [ { "date": "2019-11-20T16:08:18+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-01-06T13:01:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services 1", "product": { "name": "Red Hat JBoss Core Services 1", "product_id": "Red Hat JBoss Core Services 1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-0734", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1644364" } ], "notes": [ { "category": "description", "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: timing side channel attack in the DSA signature algorithm", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0734" }, { "category": "external", "summary": "RHBZ#1644364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734" } ], "release_date": "2018-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: timing side channel attack in the DSA signature algorithm" }, { "cve": "CVE-2018-0737", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2018-04-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1568253" } ], "notes": [ { "category": "description", "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-0737" }, { "category": "external", "summary": "RHBZ#1568253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737", "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3", "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20180416.txt", "url": "https://www.openssl.org/news/secadv/20180416.txt" } ], "release_date": "2018-04-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys" }, { "acknowledgments": [ { "names": [ "Alejandro Cabrera Aldaya" ], "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba" }, { "names": [ "Billy Bob Brumley", "Cesar Pereida Garcia", "Sohaib ul Hassan" ] }, { "names": [ "Nicola Tuveri" ], "organization": "Tampere University of Technology; Finland" } ], "cve": "CVE-2018-5407", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2018-11-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1645695" } ], "notes": [ { "category": "description", "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-5407" }, { "category": "external", "summary": "RHBZ#1645695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407", "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407" }, { "category": "external", "summary": "https://github.com/bbbrumley/portsmash", "url": "https://github.com/bbbrumley/portsmash" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20181112.txt", "url": "https://www.openssl.org/news/secadv/20181112.txt" } ], "release_date": "2018-10-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue. Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)" }, { "cve": "CVE-2018-17189", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668497" } ], "notes": [ { "category": "description", "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: DoS via slow, unneeded request bodies", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17189" }, { "category": "external", "summary": "RHBZ#1668497", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: DoS via slow, unneeded request bodies" }, { "cve": "CVE-2018-17199", "cwe": { "id": "CWE-613", "name": "Insufficient Session Expiration" }, "discovery_date": "2019-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1668493" } ], "notes": [ { "category": "description", "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_session_cookie does not respect expiry time", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-17199" }, { "category": "external", "summary": "RHBZ#1668493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199", "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199" } ], "release_date": "2019-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_session_cookie does not respect expiry time" }, { "cve": "CVE-2019-0196", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695030" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: read-after-free on a string compare", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0196" }, { "category": "external", "summary": "RHBZ#1695030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: read-after-free on a string compare" }, { "cve": "CVE-2019-0197", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695042" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_http2: possible crash on late upgrade", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0197" }, { "category": "external", "summary": "RHBZ#1695042", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-02-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "httpd: mod_http2: possible crash on late upgrade" }, { "cve": "CVE-2019-0217", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "discovery_date": "2019-04-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1695020" } ], "notes": [ { "category": "description", "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "httpd: mod_auth_digest: access control bypass due to race condition", "title": "Vulnerability summary" }, { "category": "other", "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-0217" }, { "category": "external", "summary": "RHBZ#1695020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217", "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217" }, { "category": "external", "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4", "url": "http://www.apache.org/dist/httpd/CHANGES_2.4" }, { "category": "external", "summary": "https://httpd.apache.org/security/vulnerabilities_24.html", "url": "https://httpd.apache.org/security/vulnerabilities_24.html" } ], "release_date": "2019-04-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation. In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "httpd: mod_auth_digest: access control bypass due to race condition" }, { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Core Services 1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-11-20T16:08:18+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat JBoss Core Services 1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "Red Hat JBoss Core Services 1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "Red Hat JBoss Core Services 1" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" } ] }
rhsa-2019_2925
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2925", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2925.json" } ], "title": "Red Hat Security Advisory: nodejs:10 security update", "tracking": { "current_release_date": "2024-12-15T18:55:15+00:00", "generator": { "date": "2024-12-15T18:55:15+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2925", "initial_release_date": "2019-09-30T15:15:54+00:00", "revision_history": [ { "date": "2019-09-30T15:15:54+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-30T15:15:54+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:15+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nodejs:10:8000020190911085529:f8e95b4e", "product": { "name": "nodejs:10:8000020190911085529:f8e95b4e", "product_id": "nodejs:10:8000020190911085529:f8e95b4e", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nodejs@10:8000020190911085529:f8e95b4e" } } }, { "category": "product_version", "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "product": { "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "product_id": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-docs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "product": { "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=noarch" } } }, { "category": "product_version", "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "product": { "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "product": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "product": { "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=src" } } }, { "category": "product_version", "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "product": { "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64", "product": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64", "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "product": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "product": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "product": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, "product_reference": "nodejs:10:8000020190911085529:f8e95b4e", "relates_to_product_reference": "AppStream-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64" }, "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le" }, "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x" }, "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src" }, "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64" }, "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le" }, "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x" }, "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64" }, "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le" }, "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x" }, "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64" }, "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le" }, "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x" }, "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch" }, "product_reference": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch" }, "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src" }, "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch" }, "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src" }, "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64" }, "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le" }, "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x" }, "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" }, "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-5737", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-03-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1690808" } ], "notes": [ { "category": "description", "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5737" }, { "category": "external", "summary": "RHBZ#1690808", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737" }, { "category": "external", "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/", "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/" } ], "release_date": "2019-02-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "workaround", "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass" }, { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9512", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735645" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PING frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9512" }, { "category": "external", "summary": "RHBZ#1735645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PING frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9514", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735744" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9514" }, { "category": "external", "summary": "RHBZ#1735744", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg", "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg" }, { "category": "external", "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA", "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9515", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735745" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9515" }, { "category": "external", "summary": "RHBZ#1735745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html", "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9518", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735749" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using empty frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9518" }, { "category": "external", "summary": "RHBZ#1735749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-30T15:15:54+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2925" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x", "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using empty frames results in excessive resource consumption" } ] }
rhsa-2019_2799
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nginx:1.14 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2799", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2799.json" } ], "title": "Red Hat Security Advisory: nginx:1.14 security update", "tracking": { "current_release_date": "2024-12-15T18:54:28+00:00", "generator": { "date": "2024-12-15T18:54:28+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2799", "initial_release_date": "2019-09-19T07:37:12+00:00", "revision_history": [ { "date": "2019-09-19T07:37:12+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-19T07:37:12+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:28+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nginx:1.14:8000020190830002848:f8e95b4e", "product": { "name": "nginx:1.14:8000020190830002848:f8e95b4e", "product_id": "nginx:1.14:8000020190830002848:f8e95b4e", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nginx@1.14:8000020190830002848:f8e95b4e" } } }, { "category": "product_version", "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product": { "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product_id": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-all-modules@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product": { "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product_id": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-filesystem@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "product": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, "product_reference": "nginx:1.14:8000020190830002848:f8e95b4e", "relates_to_product_reference": "AppStream-8.0.0.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src" }, "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch" }, "product_reference": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch" }, "product_reference": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64" }, "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le" }, "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x" }, "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" }, "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-19T07:37:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-19T07:37:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-19T07:37:12+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x", "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" } ] }
rhsa-2019_2775
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-nginx114-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2775", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2775.json" } ], "title": "Red Hat Security Advisory: rh-nginx114-nginx security update", "tracking": { "current_release_date": "2024-12-15T18:54:42+00:00", "generator": { "date": "2024-12-15T18:54:42+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2775", "initial_release_date": "2019-09-17T15:16:26+00:00", "revision_history": [ { "date": "2019-09-17T15:16:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-09-17T15:16:27+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:42+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "product": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "product": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "product": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "product": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "product": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)", "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" }, "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-17T15:16:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-17T15:16:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-09-17T15:16:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x", "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" } ] }
rhsa-2019_2946
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for JBoss Core Services on RHEL 6 and RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 3 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked in the References section.\n\nSecurity Fix(es):\n\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nBug Fix(es):\n\n* nghttp2: Rebase to 1.39.2\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2946", "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "JBCS-826", "url": "https://issues.redhat.com/browse/JBCS-826" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2946.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update", "tracking": { "current_release_date": "2024-12-15T18:55:01+00:00", "generator": { "date": "2024-12-15T18:55:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2946", "initial_release_date": "2019-10-01T13:40:45+00:00", "revision_history": [ { "date": "2019-10-01T13:40:45+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-01T13:40:45+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:55:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 6 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el6" } } }, { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=i686" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el6?arch=noarch" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server", "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "relates_to_product_reference": "6Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T13:40:45+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T13:40:45+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9516", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741864" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: 0-length headers lead to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9516" }, { "category": "external", "summary": "RHBZ#1741864", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://github.com/nghttp2/nghttp2/issues/1382#", "url": "https://github.com/nghttp2/nghttp2/issues/1382#" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T13:40:45+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: 0-length headers lead to denial of service" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T13:40:45+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2946" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src", "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686", "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" } ] }
rhsa-2019_2949
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for httpd24-httpd and httpd24-nghttp2 is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:2949", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2949.json" } ], "title": "Red Hat Security Advisory: httpd24-httpd and httpd24-nghttp2 security update", "tracking": { "current_release_date": "2024-12-15T18:54:35+00:00", "generator": { "date": "2024-12-15T18:54:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2019:2949", "initial_release_date": "2019-10-01T16:14:19+00:00", "revision_history": [ { "date": "2019-10-01T16:14:19+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-10-01T16:14:19+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-15T18:54:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "product": { "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "product_id": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "product": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "product_id": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "product": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el6.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "product": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el6.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "product": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "product": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "product": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=x86_64" } } }, { "category": "product_version", "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "product": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src", "product_id": "httpd24-nghttp2-0:1.7.1-7.el6.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el6.1?arch=src" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el6.1.src", "product": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.src", "product_id": "httpd24-httpd-0:2.4.34-8.el6.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el6.1?arch=src" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=src" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el7.1.src", "product": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src", "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "product": { "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "product_id": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.34-8.el6.1?arch=noarch" } } }, { "category": "product_version", "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "product": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "product_id": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.34-8.el7.1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "product": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "product": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "product": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=ppc64le" } } }, { "category": "product_version", "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "product": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "product": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "product": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "product": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=s390x" } } }, { "category": "product_version", "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "product": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "product": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "product_id": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2@1.7.1-7.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "product": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "product_id": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-libnghttp2-devel@1.7.1-7.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "product": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "product_id": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2@1.7.1-7.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "product": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "product_id": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-nghttp2-debuginfo@1.7.1-7.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_md@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-8.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-8.el7.1?arch=aarch64" } } }, { "category": "product_version", "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-8.el7.1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "product": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "product_id": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-8.el7.1?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.src", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.src", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.src", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.src", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "relates_to_product_reference": "6Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-Alt-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)", "product_id": "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch" }, "product_reference": "httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64" }, "product_reference": "httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.src", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.3" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" }, "product_reference": "httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.3" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-9511", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741860" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: large amount of data requests leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9511" }, { "category": "external", "summary": "RHBZ#1741860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T16:14:19+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: large amount of data requests leads to denial of service" }, { "acknowledgments": [ { "names": [ "the Envoy security team" ] } ], "cve": "CVE-2019-9513", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1735741" } ], "notes": [ { "category": "description", "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9513" }, { "category": "external", "summary": "RHBZ#1735741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/", "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" }, { "category": "external", "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/", "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/" } ], "release_date": "2019-08-13T17:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T16:14:19+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "workaround", "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption" }, { "cve": "CVE-2019-9517", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-08-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1741868" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "HTTP/2: request for large response leads to denial of service", "title": "Vulnerability summary" }, { "category": "other", "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-9517" }, { "category": "external", "summary": "RHBZ#1741868", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517", "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517" }, { "category": "external", "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "category": "external", "summary": "https://kb.cert.org/vuls/id/605641/", "url": "https://kb.cert.org/vuls/id/605641/" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/", "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/" } ], "release_date": "2019-08-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-10-01T16:14:19+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "category": "workaround", "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd", "product_ids": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el6.1.noarch", "6Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.src", "6Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el6.1.x86_64", "6Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-Alt-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3-7.7.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Server-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Server-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Server-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-httpd-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-debuginfo-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-devel-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-httpd-manual-0:2.4.34-8.el7.1.noarch", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-httpd-tools-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-libnghttp2-devel-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ldap-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_md-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_proxy_html-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_session-0:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-mod_ssl-1:2.4.34-8.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.src", "7Workstation-RHSCL-3.3:httpd24-nghttp2-0:1.7.1-7.el7.1.x86_64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.aarch64", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.ppc64le", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.s390x", "7Workstation-RHSCL-3.3:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "HTTP/2: request for large response leads to denial of service" } ] }
gsd-2019-9513
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2019-9513", "description": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.", "id": "GSD-2019-9513", "references": [ "https://www.suse.com/security/cve/CVE-2019-9513.html", "https://www.debian.org/security/2020/dsa-4669", "https://www.debian.org/security/2019/dsa-4511", "https://www.debian.org/security/2019/dsa-4505", "https://access.redhat.com/errata/RHSA-2020:0983", "https://access.redhat.com/errata/RHSA-2019:3935", "https://access.redhat.com/errata/RHSA-2019:3933", "https://access.redhat.com/errata/RHSA-2019:3932", "https://access.redhat.com/errata/RHSA-2019:3041", "https://access.redhat.com/errata/RHSA-2019:2966", "https://access.redhat.com/errata/RHSA-2019:2955", "https://access.redhat.com/errata/RHSA-2019:2949", "https://access.redhat.com/errata/RHSA-2019:2946", "https://access.redhat.com/errata/RHSA-2019:2939", "https://access.redhat.com/errata/RHSA-2019:2925", "https://access.redhat.com/errata/RHSA-2019:2799", "https://access.redhat.com/errata/RHSA-2019:2775", "https://access.redhat.com/errata/RHSA-2019:2746", "https://access.redhat.com/errata/RHSA-2019:2745", "https://access.redhat.com/errata/RHSA-2019:2692", "https://ubuntu.com/security/CVE-2019-9513", "https://advisories.mageia.org/CVE-2019-9513.html", "https://security.archlinux.org/CVE-2019-9513", "https://alas.aws.amazon.com/cve/html/CVE-2019-9513.html", "https://linux.oracle.com/cve/CVE-2019-9513.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2019-9513" ], "details": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.", "id": "GSD-2019-9513", "modified": "2023-12-13T01:23:47.396020Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "AKA": "HTTP/2 Resource Loop", "ASSIGNER": "cert@cert.org", "ID": "CVE-2019-9513", "STATE": "PUBLIC", "TITLE": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "credit": [ { "lang": "eng", "value": "Thanks to Jonathan Looney of Netflix for reporting this vulnerability." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU." } ] }, "generator": { "engine": "Vulnogram 0.0.7" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-400 Uncontrolled Resource Consumption" } ] } ] }, "references": { "reference_data": [ { "name": "VU#605641", "refsource": "CERT-VN", "url": "https://kb.cert.org/vuls/id/605641/" }, { "name": "USN-4099-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/4099-1/" }, { "name": "FEDORA-2019-befd924cfe", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/" }, { "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "name": "FEDORA-2019-81985a8858", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/" }, { "name": "DSA-4505", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4505" }, { "name": "FEDORA-2019-5a6a7bc12c", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/" }, { "name": "FEDORA-2019-6a2980de56", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/" }, { "name": "FEDORA-2019-8a437d5c2f", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/" }, { "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "name": "DSA-4511", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2019/dsa-4511" }, { "name": "FEDORA-2019-7a0b45fdc4", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/" }, { "name": "RHSA-2019:2692", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "name": "openSUSE-SU-2019:2120", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "name": "openSUSE-SU-2019:2114", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "name": "openSUSE-SU-2019:2115", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "name": "RHSA-2019:2745", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "name": "RHSA-2019:2746", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "name": "RHSA-2019:2775", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "name": "RHSA-2019:2799", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "name": "RHSA-2019:2925", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "name": "RHSA-2019:2939", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "name": "RHSA-2019:2949", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "name": "openSUSE-SU-2019:2232", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "name": "openSUSE-SU-2019:2234", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "name": "RHSA-2019:2955", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "name": "RHSA-2019:2966", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "name": "openSUSE-SU-2019:2264", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "name": "RHSA-2019:3041", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "name": "RHSA-2019:3933", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "name": "RHSA-2019:3935", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "name": "RHSA-2019:3932", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "name": "DSA-4669", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2020/dsa-4669" }, { "name": "https://www.oracle.com/security-alerts/cpuoct2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "refsource": "MISC", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "name": "https://www.synology.com/security/advisory/Synology_SA_19_33", "refsource": "CONFIRM", "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "name": "https://support.f5.com/csp/article/K02591030", "refsource": "CONFIRM", "url": "https://support.f5.com/csp/article/K02591030" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0002/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0005/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS", "refsource": "CONFIRM", "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS" }, { "name": "https://www.oracle.com/security-alerts/cpujan2021.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujan2021.html" } ] }, "source": { "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.4.0", "versionStartIncluding": "1.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*", "cpe_name": [], "versionStartIncluding": "14.04", "vulnerable": false }, { "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "versionStartIncluding": "10.12", "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "8.0.3", "versionStartIncluding": "8.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "7.1.6", "versionStartIncluding": "7.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "6.2.3", "versionStartIncluding": "6.0.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "7.7.2.24", "versionStartIncluding": "7.7.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "7.8.2.13", "versionStartIncluding": "7.8.2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "8.2.0", "versionStartIncluding": "8.1.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.16.1", "versionStartIncluding": "1.9.5", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.17.2", "versionStartIncluding": "1.17.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "8.8.1", "versionStartIncluding": "8.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndIncluding": "10.12.0", "versionStartIncluding": "10.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*", "cpe_name": [], "versionEndExcluding": "12.8.1", "versionStartIncluding": "12.0.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "10.16.3", "versionStartIncluding": "10.13.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe_name": [], "versionEndExcluding": "8.16.1", "versionStartIncluding": "8.9.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cert@cert.org", "ID": "CVE-2019-9513" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ] }, "references": { "reference_data": [ { "name": "VU#605641", "refsource": "CERT-VN", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://kb.cert.org/vuls/id/605641/" }, { "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "name": "USN-4099-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/4099-1/" }, { "name": "https://www.synology.com/security/advisory/Synology_SA_19_33", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "name": "https://support.f5.com/csp/article/K02591030", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.f5.com/csp/article/K02591030" }, { "name": "FEDORA-2019-befd924cfe", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/" }, { "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update", "refsource": "BUGTRAQ", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "name": "FEDORA-2019-81985a8858", "refsource": "FEDORA", "tags": [ "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/" }, { "name": "DSA-4505", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2019/dsa-4505" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0005/", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0005/" }, { "name": "https://security.netapp.com/advisory/ntap-20190823-0002/", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://security.netapp.com/advisory/ntap-20190823-0002/" }, { "name": "FEDORA-2019-5a6a7bc12c", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/" }, { "name": "FEDORA-2019-6a2980de56", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/" }, { "name": "FEDORA-2019-8a437d5c2f", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/" }, { "name": "20190902 [SECURITY] [DSA 4511-1] nghttp2 security update", "refsource": "BUGTRAQ", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "name": "DSA-4511", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2019/dsa-4511" }, { "name": "FEDORA-2019-7a0b45fdc4", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/" }, { "name": "RHSA-2019:2692", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "name": "openSUSE-SU-2019:2120", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "name": "openSUSE-SU-2019:2114", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "name": "openSUSE-SU-2019:2115", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "name": "RHSA-2019:2746", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "name": "RHSA-2019:2745", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "name": "RHSA-2019:2775", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "name": "RHSA-2019:2799", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "name": "RHSA-2019:2925", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "name": "RHSA-2019:2939", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "name": "RHSA-2019:2949", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "name": "openSUSE-SU-2019:2232", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "name": "openSUSE-SU-2019:2234", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "name": "RHSA-2019:2955", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "name": "RHSA-2019:2966", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "name": "openSUSE-SU-2019:2264", "refsource": "SUSE", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" }, { "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS" }, { "name": "RHSA-2019:3041", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "name": "RHSA-2019:3935", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "name": "RHSA-2019:3933", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "name": "RHSA-2019:3932", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "name": "DSA-4669", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2020/dsa-4669" }, { "name": "https://www.oracle.com/security-alerts/cpuoct2020.html", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "name": "https://www.oracle.com/security-alerts/cpujan2021.html", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6 } }, "lastModifiedDate": "2022-08-12T18:41Z", "publishedDate": "2019-08-13T21:15Z" } } }
ghsa-3p35-64mh-v96v
Vulnerability from github
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
{ "affected": [], "aliases": [ "CVE-2019-9513" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-08-13T21:15:00Z", "severity": "HIGH" }, "details": "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.", "id": "GHSA-3p35-64mh-v96v", "modified": "2022-08-13T00:00:31Z", "published": "2022-05-24T16:53:18Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2692" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5" }, { "type": "WEB", "url": "https://seclists.org/bugtraq/2019/Aug/40" }, { "type": "WEB", "url": "https://seclists.org/bugtraq/2019/Sep/1" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20190823-0002" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20190823-0005" }, { "type": "WEB", "url": "https://support.f5.com/csp/article/K02591030" }, { "type": "WEB", "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS" }, { "type": "WEB", "url": "https://usn.ubuntu.com/4099-1" }, { "type": "WEB", "url": "https://www.debian.org/security/2019/dsa-4505" }, { "type": "WEB", "url": "https://www.debian.org/security/2019/dsa-4511" }, { "type": "WEB", "url": "https://www.debian.org/security/2020/dsa-4669" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "type": "WEB", "url": "https://www.synology.com/security/advisory/Synology_SA_19_33" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2745" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2746" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2775" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2799" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2925" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2939" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2949" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2955" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:2966" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:3041" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "type": "WEB", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md" }, { "type": "WEB", "url": "https://kb.cert.org/vuls/id/605641" }, { "type": "WEB", "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.